Suche Bilder Maps Play YouTube News Gmail Drive Mehr »
Anmelden
Nutzer von Screenreadern: Klicken Sie auf diesen Link, um die Bedienungshilfen zu aktivieren. Dieser Modus bietet die gleichen Grundfunktionen, funktioniert aber besser mit Ihrem Reader.

Patente

  1. Erweiterte Patentsuche
VeröffentlichungsnummerUS5815665 A
PublikationstypErteilung
AnmeldenummerUS 08/626,460
Veröffentlichungsdatum29. Sept. 1998
Eingetragen3. Apr. 1996
Prioritätsdatum3. Apr. 1996
GebührenstatusBezahlt
Veröffentlichungsnummer08626460, 626460, US 5815665 A, US 5815665A, US-A-5815665, US5815665 A, US5815665A
ErfinderJeffrey A. Teper, Sudheer Koneru, Gordon Mangione, Rudolph Balaz, Aaron M. Contorer, Lucy Chao
Ursprünglich BevollmächtigterMicrosoft Corporation
Zitat exportierenBiBTeX, EndNote, RefMan
Externe Links: USPTO, USPTO-Zuordnung, Espacenet
System and method for providing trusted brokering services over a distributed network
US 5815665 A
Zusammenfassung
An Online Brokering Service provides user authentication and billing services to allow users to anonymously and securely purchase online services from Service Providers (SP) sites (e.g., World Wide Web sites) over a distributed public network, which may be an untrusted public network such as the Internet. Users and SP sites initially register with the Brokering Service, and are provided with respective client and server software components for using the Brokering Service. In one embodiment, when a user initially connects to an SP site, the SP site transmits a challenge message over the public network to the user computer, and the user computer generates and returns and cryptographic response message (preferably generated using a password of the user). The SP site then passes the response message to the Brokering Service, which in-turn looks up the user's password and authenticates the response message. If the response message is authentic, the Online Brokering Service transmits an anonymous ID to the SP site, which can be used for subsequently billing the user. In addition, the Online Brokering Service transmits user-specific access rights data to the SP site, allowing the SP site to customize its services for the particular user. Billing events generated by the SP sites are transmitted to the Brokering Service, which maintains a user-viewable bill that shows all charges from all SP sites accessed by the user. Advantageously, the payment information (e.g., credit card number) and other personal information of users are not exposed to the SP sites, and are not transmitted over the distributed network.
Bilder(6)
Previous page
Next page
Ansprüche(46)
What is claimed is:
1. A method of providing an online service to a user over a public network, the online service provided by a Service Provider (SP) site to a user computer via the public network, the method comprising the steps of:
sending a request message from the user computer to the SP site over the public network to request the use of the online service;
generating a challenge message at the SP site in response to the request message and sending the challenge message over the public network to the user computer;
generating a response message in the user computer in response to the challenge message and sending the response message over the public network to the SP site, the response message including or being based upon an identifier of the user;
sending at least the response message from the SP site to a remote online broker site, the online broker site having a brokering database which contains account information of registered users of an online brokering service of the online broker site;
processing the response message at the remote online broker site to determine whether the response message is authentic, the step of processing comprising accessing the account information in the brokering database;
sending a verification message from the remote online broker site to the SP site, the verification message indicating whether the response message is authentic;
retrieving access rights data of the user from the brokering database if the response message is authentic, the access rights data specifies a plurality of content categories to which the user has access, the plurality of content categories corresponding to a plurality of different online services offered by the SP site;
sending the access rights data from the online broker site to the SP site;
providing the online service from the SP site to the user computer over the public network if the verification message indicates that the response message is authentic; and
denying access by the user to the online service if the verification message indicates that the response message is not authentic.
2. A method as in claim 1, wherein the step of generating a response message comprises obtaining a password of the user.
3. A method as in claim 2, wherein the step of generating the response message further comprises applying a cryptographic algorithm to at least the challenge message such that the resulting response message depends upon both the challenge message and the password.
4. A method as in claim 2, wherein the step of obtaining the password of the user comprises retrieving the password from a password cache on the user computer, the password cache temporarily storing the password following manual entry by the user, the method thereby enabling the user to access multiple SP sites without re-entering the password.
5. A method as in claim 1, further comprising the steps of:
assigning an anonymous identifier to the user at the online broker site and sending the anonymous identifier to the SP site to enable the SP site to anonymously charge the user for an online service; and
generating a billing event at the SP site and sending the billing event to the online broker site, the billing event specifying at least (1) the anonymous identifier of the user, and (2) a monetary charge to be applied to an account of the user.
6. A method as in claim 5, further comprising the steps of:
establishing a connection between the user computer and the online broker site; and
providing an online billing statement to the user over the connection, the online billing statement reflecting the monetary charge specified in the billing event.
7. A method as in claim 5, further comprising the step of sending a billing statement from the online broker site to the user computer over the public network, the billing statement reflecting the monetary charge specified in the billing event.
8. A method as in claim 1, further comprising the steps of:
sending an access rights update request from the SP site to the remote online broker site, the access rights update request specifying an update to be made by the online brokering service to the access rights of the user; and
processing the access rights update request at the online broker site by updating the access rights data of the user stored within the brokering database.
9. A method as in claim 1, further comprising the steps of:
retrieving user-specific preference data of the user from the brokering database and sending the preference data from the online broker site to the SP site, the preference data indicating at least one user-specified preference for the customization of online services; and
adjusting the online service provided from the SP site according to the user-specified preference.
10. A method as in claim 9, wherein the preference data includes a connection speed at which the user computer connects to the public network, and wherein the step of adjusting comprises providing the service to the user computer at a speed which is commensurate with the connection speed.
11. A method as in claim 9, wherein the preference data includes a display preference for the display of a particular type of media.
12. A method as in claim 1, further comprising the steps of:
generating a first session key at the user computer;
generating a second session key at the online broker site and sending the second session key to the SP site, the second session key corresponding to the first session key; and
using the first and second session keys to encrypt and decrypt message traffic between the user computer and the SP site as the online service is provided to the user computer.
13. A method as in claim 1, wherein the public network comprises the Internet.
14. A method as in claim 1, wherein the steps of passing the request, challenge and response messages over the public network respectively comprise passing the request, challenge and response messages over a private network.
15. A method providing a fee-based online service from a Service Provider (SP) site to a user over a public network while concealing the payment and personal information of the user from the Service Provider, comprising the steps of:
providing an online broker site that provides an online brokering service, the online broker site having a brokering database which contains account information on the user and on other users of the online brokering service, the online broker site located remotely from the SP site; establishing a connection between a computer of the user ("user computer") and the SP site over at least the public network;
generating an encrypted authentication message at the user computer and sending the authentication message to the online broker site via at least the public network;
verifying the authentication message at the online broker site to thereby authenticate the user, the step of verifying comprising accessing the account information of the user stored in brokering database;
generating an anonymous ID at the online broker site and sending the anonymous ID to the SP site to allow the SP site to charge the user for the online service;
providing the online service from the SP site to the user computer over the public network;
retrieving user-specific customization data of the user from the brokering database and sending the customization data from the online broker site to the SP site, the customization data indicating a user-specified preference for the customization of the online service;
adjusting the online service provided from the SP site according to the user-specified preference; and
generating a billing event at the SP site and sending the billing event to the online broker site, the billing event specifying at least (1) the anonymous ID, and (2) a monetary charge to be applied to an account of the user.
16. A method as in claim 15, wherein the step of generating an encrypted authentication message comprises the steps of prompting the user for a password and using the password to generate the authentication message, the password stored in the brokering database so that the online brokering service can determine whether the authentication message corresponds to the password.
17. A method as in claim 15, wherein the step of sending the encrypted authentication message to the online broker site comprises the steps of:
sending the authentication message from the user computer to the SP site over the public network; and
sending the authentication message from the SP site to the online broker site.
18. A method as in claim 15, further comprising the step of processing the billing event at the online broker site to thereby apply the charge to the account of the user.
19. A method as in claim 18, further comprising the step of providing an account statement from the online broker site to the user computer over at-least the public network, the account statement reflecting the charge specified in the billing event.
20. A method as in claim 15, further comprising the steps of:
retrieving access rights data of the user from the brokering database, the access rights data specifying the access rights of the user with respect to the online service and/or the SP site; and
sending the access rights data from the online broker site to the SP site.
21. A method as in claim 20, further comprising the step of interpreting the access rights data at the SP site to determine whether the user is authorized to access a particular content item of the SP site.
22. A method as in claim 20, further comprising the step of sending an access rights update request from the SP site to the online broker site, the access rights update request specifying at least (1) the anonymous ID of the user, and (2) an update to be made by the online brokering service to the access rights data of the user.
23. A method as in claim 15, wherein the customization data includes a connection speed at which the user computer connects to the public network, and wherein the step of adjusting comprises providing the service to the user computer at a speed which generally corresponds to the connection speed.
24. A method as in claim 15, wherein the customization data includes a display preference for the display of a particular type of media.
25. A method as in claim 15, further comprising the steps of:
generating a first session key at the user computer;
generating a second session key at the online broker site and sending the second session key to the SP site, the second session key corresponding to the first session key; and
using the first and second session keys to encrypt and decrypt message traffic between the user computer and the SP site as the online service is provided to the user computer.
26. A method as in claim 15, wherein the public network comprises the Internet.
27. A method as in claim 15, wherein the online service comprises a software download service.
28. A method as in claim 15, wherein the online service comprises user access to an online version of a printed publication.
29. A system for allowing users to securely access online service providers over an untrusted distributed network, comprising:
a plurality of Service Provider (SP) sites connected to the distributed network, each SP site running at least one service application to provide an online service to users over the distributed network;
a plurality of user computers connected to the distributed network, each user computer running at least one client application for accessing online services of the SP sites;
an online broker site connected to the plurality of SP sites, the online broker site running at least one brokering application to provide an online brokering service, the online broker site including a user database containing user-specific authentication information of users that have registered to use the online brokering service, the registered users accessing the SP sites from the users computers over the distributed network;
a database which stores user-specific customization data, the customization data specifying preferences of the registered users with respect to the online services of the SP sites, the customization data provided to the SP sites by the online brokering service to enable the SP sites to customize the online services to the preferences of individual registered users; and
an authentication protocol for allowing the online brokering service to authenticate registered users in response to user-specific authentication requests from the SP sites, the authentication requests responsive to requests from the user computers to access the online services of the SP sites, the authentication protocol implemented by software components of the user computers, the SP sites, and the online broker site.
30. A system as in claim 29, further comprising a billing system for allowing the SP sites to charge the registered users for accesses to the online services by sending billing events to the online brokering service, the billing system including a centralized database for recording billing events to accounts of the registered users.
31. A system as in claim 30, wherein the billing system includes a billing viewer application running on the user computers, the billing viewer application allowing a registered user to view a personal billing statement stored in the centralized database, the billing statement including charges from multiple different SP sites of the plurality of SP sites.
32. A system as in claim 29, further comprising an access rights database at the online broker site, the access rights database storing access rights data for a plurality of the registered users, the access rights data specifying access rights of the plurality of registered users with respect to the SP sites, the access rights data provided to the SP sites by the online brokering service.
33. A system as in claim 29, wherein the authentication protocol implements a challenge-response protocol.
34. A system as in claim 29, wherein the distributed network comprises the Internet.
35. A method providing a fee-based online service from a Service Provider (SP) site to a user over a distributed network while concealing the payment and personal information of the user from the Service Provider, comprising the steps of:
providing an online broker site that provides an online brokering service, the online broker site having a brokering database which contains account information on the user and on other users of the online brokering service, the online broker site located remotely from the SP site;
sending an access request from a computer of the user ("user computer") over the distributed network to the SP site;
sending an authentication request from the SP site to the online broker site in response to the access request;
prompting the user for a user identifier at the user computer and sending the user identifier to the online broker site;
authenticating the user at the online broker in response to the authentication request, the step of authenticating comprising using the user identifier sent from the user computer to access the account information stored within the brokering database;
sending a verification message from the online broker site to the SP site in response to the authentication request, the verification message indicating whether the step of authenticating was successful;
retrieving access rights data of the user from the brokering database if the step of authenticating is successful, the access rights data specifying a plurality of access rights of the user with respect to the online service and/or the SP site;
sending the plurality of access rights data from the online broker site to the SP site to anonymously inform the SP site of the access rights of the user;
providing the fee-based online service from the SP site to the user computer over the distributed network only if the verification message indicates that the step of authenticating was successful;
generation a billing event at the SP site and sending the billing event to the online broker site, the billing event anonymously identifying the user to the online brokering service, the billing event including a charge for the providing of the online service to the user computer; and
updating an account of the user at the online broker site to reflect the charge included within the billing event.
36. A method as in claim 35, further comprising the step of providing an account statement from the online broker site to the user computer over at-least the distributed network, the account statement reflecting the charge included in the billing event.
37. An online brokering service for allowing users of a public network to anonymously purchase online services from Service Provider (SP) sites on the public network, the online brokering service provided from an online broker site that is located remotely from the SP sites, the online brokering service comprising:
a database which contains account information of users that have registered with online brokering service, the account information including at least a unique identifier of each registered user;
a billing system for recording monetary charges to accounts of registered users, the monetary charges corresponding to online services purchased from the SP sites over the public network; and
a software package running at the online broker site, the software package performing at least the following functions:
(a)authenticating registered users in response to authentication requests received from the SP sites, the authentication requests generated in response to attempts by registered users to access online services of the SP sites, said authenticating comprising accessing the database to verify user account information;
(b)receiving user-specific billing events from the SP sites and passing the billing events to the billing system to update the accounts of registered users, each billing event specifying at least (1) an anonymous ID of a registered user, and (2) a charge to be applied to the account of the registered user; and
(c) retrieving user-specific access rights data from the database in response to requests from the SP sites and transmitting the access rights data to the SP sites, the access rights data specifying a plurality of content categories or services to which a registered user has access and enabling the SP sites to provide customized access rights to the registered users.
38. An online brokering service as in claim 37, wherein the software package further performs the function of:
retrieving user-specific customization data from the database in response to requests from the SP sites and transmitting the customization data to the SP sites, the customization data indicating user specified preferences for enabling the SP sites to provide user customized online services.
39. An online brokering service as in claim 37, wherein the billing system comprises a software module for allowing the registered user to remotely access an online billing statement, the online billing statement reflecting billing events received by the online broker site from multiple different SP sites.
40. An online brokering service as in claim 37, wherein the public network comprises the Internet.
41. A virtual online services network for allowing users to directly access service provider (SP) sites over a public network, comprising:
an online brokering service running on at least one site of a computer network, the online brokering service storing account and billing information for a plurality of users of the public network, each of the users having a respective account with the online brokering service, the online brokering service providing online access by the users to account-specific billing information;
a plurality of fee-based online services running on a plurality of independent service provider (SP) sites on the public network, the SP sites directly accessible to the users over the public network, each SP site being registered with the online brokering service and being configured to use the online brokering service to authenticate the users when the users connect to the SP sites over the public network, the fee-based services configured to generate account-specific billing events in response to uses of the online services by the users and to forward the billing events to the online brokering service so that the users are billed for the online services from a centralized billing location; and
a log-on protocol which allows the users to access the plurality of online services using their respective accounts with the online brokering service, the log-on protocol configured to (1) prompt a user for an account identifier, (2) cache the account identifier during the course of a user log-on session, and (3) use the cached account identifier to access multiple different SP sites, the log-on protocol thereby allowing the user to seemlessly access the plurality of fee-based online services following a single log-on event;
wherein the online brokering service stores user-specific access rights data, and provides the access rights data specifying access rights for a plurality of online services for a specific user to the SP sites in response to requests from the SP sites, and wherein the fee-based online services are configured to use the access rights data to automatically provide user-customized services to the users.
42. A virtual online services network as in claim 41, wherein the log-on protocol is implemented by respective software components stored on (1) the SP sites, (2) the at least one site of the online brokering service, and (3) computers of the users.
43. A virtual online services network as in claim 41, wherein the log-on protocol includes a challenge-response authentication protocol for allowing the SP sites to authenticate the users.
44. A virtual online services network as in claim 41, wherein the public network comprises the Internet.
45. An apparatus comprising:
A broker server operatively connected to a computer network, the broker server having a processor and a computer readable memory, the memory storing broker server implementation software, including customer access software, site linking software to link customers to selected sites on the computer network and at least one data structure;
the at least one data structure including a list of registered customers along with corresponding ID and payment information, and including a list of online sites with their corresponding linking information, the list of online sites being a subset of the sites available to users of the computer network, the at least one data structure further including access rights to a plurality of online services provided by at least one online site within the list of online sites;
whereby the broker server facilitates seamless connection between a selected customer from its list of customers and a selected online site from the listed online sites to create a virtual online service, including providing the selected customer's access rights to the plurality of online services provided by the selected online site.
46. An apparatus as in claim 45, wherein the computer network is a public network which comprises the Internet, and wherein the online sites are World Wide Web sites of the Internet.
Beschreibung
BACKGROUND OF THE INVENTION

1. Field of the Invention

This invention relates to computer networks, and more particularly, relates to a system and method for allowing consumers to securely and anonymously make purchases and access online services over an untrusted distributed network such as the Internet.

2. Description of the Related Art

The present invention involves the problem of allowing individual business entities, referred to herein as Service Providers or "SPs," to efficiently and securely sell online services to consumers over a computer network. These online services (also referred to herein as "SP services") may include, for example, downloadable software programs sold by the Service Providers, online publications (e.g., magazines and newspapers) to which consumers subscribe, travel-related services offered by certain Service Providers, or personal finance related services.

The traditional solution to this problem involves the use of a centralized online services network (such as MSN, Compuserve, Prodigy, or America Online) as a "middleman" or broker between the Service Provider and the consumer. Consumers register with these networks (typically by providing a credit card number and other user information), and are then given access to the various SP services available on the particular network. User access to the SP services is typically provided in one of two ways: (1) the SP service content is hosted by (i.e., stored on) the computers of the online services network, or (2) the Service Provider is given a private, direct connection to the online services network so as to make the SP service a part of the same logical network. In either case, consumers are charged by the provider of the online services network for using the SP services (e.g., by a flat fee, or on a per-service or a per-unit-time basis), and a portion of the proceeds are passed along to the Service Providers.

One significant benefit of above-described approach is that the Service Providers need not be concerned with the problems of user authentication and billing, since these matters are typically handled exclusively by the online services network. Additionally, the approach provides for a high degree of protection against the misuse of user information, since the personal and billing information of consumers is normally not exposed to the Service Providers. One significant limitation to this approach, however, is that it does not fully exploit the low cost and wide availability of public, distributed networks, such as the Internet, to connect consumers and Service Providers.

A more recent solution, which exploits the low cost and wide availability of the Internet, has been for Service Providers host their own content as World Wide Web sites ("Web" or "WWW" sites) which can be accessed by consumers "directly" via the Internet. With this approach, the user (consumer) typically registers with each individual Web site from which online services are purchased, and the Service Provider in-turn bills the user directly for the services rendered. Such registration typically involves the transmission of payment and other user information over the Internet to the Web site, and the subsequent assignment of a password and/or account number to the user.

Although this "direct access" approach takes full advantage of the Internet, it does so at the cost of considerable inconvenience and increased security risk to the consumer. For example, the user typically must remember a number of different passwords and/or account numbers (corresponding to the different Web sites), and must separately log onto each Web site from which the user wishes to purchase a service. (This is in contrast to the online services network approach, in which the user performs a single log-on with a single password.) Additionally, because the user must separately register with each Web site, the user's personal and payment information (e.g., credit card number, billing address, phone number, etc.) is unnecessarily exposed to a large number of entities (including both the Service Providers and those who may fraudulently intercept the information as it is transmitted over the Internet), increasing the likelihood of misuse. Further, the direct access approach currently does not allow the user to view a single, centralized bill that shows the charges for all of the SP services rendered.

The direct access approach also has the deficiency of requiring each Service Provider to provide its own security (e.g., user authentication) and billing services. This in-turn requires each Service Provider to implement its own database to store the account information (e.g., passwords, account numbers, credit card numbers, user access rights, charges, etc.) of its subscribers.

What is needed, therefore, is a system and method which allows online services to be sold directly over an untrusted distributed network such as the Internet without the aforementioned problems and inconveniences.

SUMMARY OF THE INVENTION

The present invention provides a system and method in which Service Providers host their own content as directly-accessible sites (referred to herein as "SP sites") on a distributed network such as the Internet, while relying on a centralized Online Broker site (which implements an Online Brokering Service) to handle user-authentication and billing matters. The system advantageously allows users to purchase online services from the SP sites directly, without having to transmit payment information and other personal information over the distributed network, and without having to reveal such information to the Service Providers from which the online services are purchased. In a preferred embodiment the SP sites are in the form of Web sites on the Internet, and the online services available on the Web sites are accessed by the user using a single account (e.g., username and/or password) established between the user and the Online Broker.

The system and method of the invention are advantageously suited for use over a completely untrusted network such as the Internet. In general, however, the system and method can be used on any type of distributed network over which online services are provided by Service Providers to end users, including both trusted and untrusted networks, and including public, private, and hybrid public-private networks.

In accordance with the invention, users (consumers) and Service Providers that wish to make use of the Online Brokering Service initially register with the Brokering Service, and are in-turn provided with the client and server software components needed to make use of the Brokering Service. Upon registration, users provide various account information to the Online Broker, such as payment information (e.g., credit card number), name, address and phone number. This information is maintained in a brokering database at the Online Broker site, and is not exposed to the Service Providers. Each user additionally selects a password, and is assigned a unique ID which can be mapped to the user only by the Online Brokering Service. The password and unique ID are stored in the brokering database, and are used to authenticate registered users.

In operation, when a user connects to a registered SP site and attempts to access an online service, the SP site initiates a challenge-response authentication sequence which allows the Online Brokering Service to authenticate the user for the SP site. In the preferred embodiment, the SP site sends a challenge message to the user's computer over the distributed network (e.g., the Internet), and the user computer responds by generating and returning a cryptographic response message. The cryptographic response message is preferably based on both the challenge message and the user's password (which is entered manually by the user). This response message is essentially meaningless to the SP site, but contains the information needed by the Online Brokering Service to authenticate the user.

The SP site forwards the response message to the Online Broker site along with the user's unique ID (which the SP site obtains from the user computer) and the original challenge message. The Online Brokering Service in-turn accesses the brokering database to determine whether the response message was properly generated, and to thereby authenticate the user. The Online Broker site then sends a message to the SP site indicating whether or not the user was successfully authenticated. Because all three entities (the user computer, the SP site, and the Online Broker site) participate in the authentication process, a high degree of security is achieved.

Upon determining that a user is authentic, the Online Brokering Service preferably sends an anonymous session ID to the SP site to allow the SP site to anonymously bill the user for services subsequently purchased. As the user purchases online services (such as software downloads, accesses to online publications, etc.), the SP site sends billing events to the Online Brokering Service, with each billing event specifying both the anonymous session ID and a charge to be applied to the user's account. The Online Brokering Service in-turn applies such charges to the user's account. Advantageously, the user can later access the Online Brokering site to view an account statement which shows all of the charges from all of the registered SP sites accessed by the user.

The above-described authentication sequence occurs each time the user accesses a different (registered) SP site. With the exception of the manual entry of the password by the user, this authentication sequence is transparent to the user. Advantageously, the client software components on the user's computer temporarily cache the user password once it has been manually entered, allowing the user access one SP site after another without having to reenter the password.

In addition to handling authentication and billing matters, the Online Brokering Service preferably stores user-specific access rights data for the SP sites, and provides the Service Providers with software components for making updates to such access rights data. Upon user authentication, the Online Brokering Service sends to the SP site the user's access rights data which corresponds to the SP site. This data may specify, for example, the particular online publications to which the user has subscribed, or the particular file operations (edit, delete, view-only, etc.) that the user is authorized to perform.

The Online Brokering Service also preferably stores, and dynamically provides to the SP sites upon user authentication, user-specific customization data which may be used by the Service Providers to customize their respective services to individual users. This customization information may include, for example, (1) user-specified preferences for the display of certain types of data, (2) the geographic region (e.g., zip code) in which the user resides, or (3) the configuration of the user's computer. By way of example, the Online Brokering Service may provide the SP sites with information about the connection speeds at which the users connect to the Internet, allowing the Service Provider to appropriately adjust the display resolution and/or the download speed of their services; or, the Online Brokering Service may provide the SP sites with zip codes of users, allowing the services to be tailored to specific geographic regions.

In the preferred embodiment, the system of online services (provided on different Web sites) advantageously appears to the user as a virtual online services network; the user performs a single log-on (using the username and password established with the Online Broker), and then seemlessly accesses one online service after another (on different Web sites) without having to perform a subsequent logon. In addition, the online services are automatically customized to the user's particular access rights and customization preferences. Further, the user can make purchases from the Web sites without ever having to input payment or user information, and can view an account statement which shows all charges from all Web sites.

In addition to taking advantage of the low cost and wide availability of the Internet, the system of the preferred embodiment provides a number of significant advantages over existing methods for purchasing online services over the Internet. From the perspective of the user, one important advantage is that the services are purchased without transmitting payment information (e.g., credit card number) or other personal information over the Internet, and without exposing such information to the Service Providers. Another advantage is that the user is billed by a single billing source (the Online Broker), and can view a single account statement which shows all of the charges from all of the Service Providers. Another advantage is that the user can access the various SP sites and services using a single password and log-on procedure, and can access one SP site after another without having to re-enter the password. Another advantage is that the user is automatically provided with customized services (including customized access rights) at each registered SP site.

The present invention also provides significant advantages to the Service Providers. For example, in contrast to existing systems, the Service Providers do not have to handle user authentication and billing matters, and do not have to implement complex database systems for storing the account information of individual users.

BRIEF DESCRIPTION OF THE DRAWINGS

These and other features and advantages of the invention will now be described with reference to the drawings of certain preferred embodiments, which are intended to illustrate and not to limit the invention, and in which:

FIG. 1 illustrates the general architecture of a system which operates in accordance with the present invention.

FIG. 2 Illustrates the steps performed when a registered user accesses a online service of a registered Service Provider site. Boxes shown in dashed lines in FIG. 2 illustrates steps which may or may not be performed, depending upon the particular actions of the user.

FIG. 3 illustrates the communications which take place between a user computer, Service Provider (SP) site, and an Online Broker site in accordance with the present invention, with the solid arrows (numbered 1-5) illustrating messages that are exchange as part an authentication sequence.

FIG. 4 illustrates the architecture of a preferred implementation which makes use of existing componets of The Microsoft Network (MSN).

FIG. 5 illustrates a preferred format in which user access rights data is stored and provided to SP sites in the system of FIG. 4.

FIG. 6 illustrates the steps that are performed by the Brokering Agent of FIG. 4 in response to an authentication request from an SP site.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

1. Overview

The present invention involves a system and method for enabling consumers to anonymously, securely and conveniently purchase online services from multiple Service Providers (SPs) over a distributed network. The distributed network may be an untrusted public network such as the Internet. In accordance with the invention, a trusted third-party broker provides billing and security services for registered Service Providers via an Online Brokering Service, eliminating the need for the Service Providers to handle such matters. To make use of the Online Brokering Service, users and Service Providers initially register with the Online Broker, and are in-turn provided with the software components needed to make use of the services offered by the broker. These software components, in combination with the Online Brokering Service, preferably provide the following features:

1. A pass-through authentication protocol which allows the registered user to be authenticated by the Online Broker (upon accessing an SP site) while remaining anonymous to the Service Providers and the other entities of the distributed network.

2. A billing system in which the Service Providers send billing events to the Online Broker to allow the broker to generate a centralized bill for each registered user.

3. An online billing viewer which allows each registered user to view a personal statement of all of the charges accrued through access to the various SP sites.

4. An access rights system in which the access rights of individual users with respect to different SP sites are stored by the Online Broker, and are provided dynamically to the SP sites upon user authentication.

5. A service customization feature in which user-specified customization information (such as the user's system configuration, display preferences, geographic region, etc.), is stored by the Online Broker, and is transmitted to individual SP sites upon user authentication (or upon request by the SP sites) to allow the SP sites to provide services that are customized for individual users.

6. A user log-on procedure which allows a registered user to enter a single password at the beginning of an Internet access session (or upon accessing the first registered SP site), and then access one SP site after another without having to re-enter the password.

In addition, the Online Brokering Service may provide an online user directory of the services of registered Service Providers. This allows users to conveniently determine the identities of the Service Providers that have registered with the Online Brokering Service, and reduces the need for the Service Providers to publicly promote their respective on-services.

Prior to using the Online Brokering Service, users and Service Providers, must register with the Online Broker. This involves the following steps:

1. The user registers with the Online Broker by providing various user information (name, address, phone number, etc.) and payment information (credit card number, purchase order instructions, etc.) to the Broker. The user additionally agrees to a contract, and establishes a personal password that is known only by the user and the Broker. Additionally, the Broker assigns a unique ID that can be mapped to the user only by the Broker, and provides the user with the client software components of the system.

2. The Service Provider registers with the Broker by providing various business and payment information, and by entering into a contract with the Broker. The Broker may investigate the Service Provider prior to accepting the registration. The Broker issues a password to the Service Provider, and provides the Service Provider with the server-side software components of the system.

3. The Service Provider establishes a session with the Online Brokering Service. This session is may be established over the same distributed network (e.g., the Internet) on which the SP services are provided to registered users, or may be established over a separate private network or communications channel. As described below, the Service Providers and the Online Broker exchange encrypted messages throughout the session for the purposes of authenticating registered users, obtaining and updating user access rights, transferring user customization information to the SP sites, and recording billing events to user accounts maintained by the Online Broker.

In comparison to existing systems for purchasing online services over the Internet, the present invention provides the following significant advantages:

1. The user purchases services from the Service Providers without transmitting payment information (e.g., credit card number) or other personal information over the Internet.

2. The user's identity and payment information are stored in a single, centralized location, and are not revealed to the Service Providers from which services are purchased.

3. The user is billed by a single source (the Online Broker), and can view a single billing statement which shows all of the charges from all of the Service Providers.

4. The user can access the various SP services using a single password, and can access one SP site after another without having to re-enter the password.

5. Using the access rights data and/or the customization information stored by Online Broker, the Service Providers can provide customized services to the individual users. For example, upon connecting to an SP site which offers online subscriptions to a variety of magazines, the user can automatically be provided with a listing of the magazines that the user has subscribed to, and can be prevented from accessing the other magazines without subscribing.

6. Because the Service Providers rely on the Online Brokering Service to perform user authentication and billing, the Service Providers do not have to perform their own user authentication, and do not have to implement database systems for storing the account information of individual users.

The system and method of the present invention are advantageously suited for use over a completely untrusted public network such as the Internet. (When used in herein in conjunction with "network," the term "public" is intended to imply that user access to the network is not controlled by or limited to a particular business entity or group of business entities. Likewise, term "distributed" implies that processing capabilities and services are spread out among different nodes of the network - as opposed to being centralized within a single host, server or LAN -- with different nodes providing different services.) In general, however, the system and method can be used on any type of distributed network over which online services are provided by Service Providers to end users, including both trusted and untrusted networks, and including public, private, and hybrid public-private networks.

To facilitate a complete understanding invention, the remainder of the detailed description is arranged as follows: The basic components and features of the preferred embodiments will be initially be described with reference to FIGS. 1-3 under the headings GENERAL ARCHITECTURE and OPERATION. A specific implementation which makes use of the pre-existing security, sysop tools, accounts database, and billing system components of The Microsoft Network (MSN) will then be described with reference to FIGS. 4-6 under the headings ARCHITECTURE OF MSN-BASED IMPLEMENTATION and OPERATION OF MSN-BASED IMPLEMENTATION.

2. General Architecture (FIG. 1)

FIG. 1 illustrates the basic components of a system which operates in accordance with the present invention. Registered users (also referred to as "consumers") connect to the Internet 30 (or other distributed public network) via user computers 40 to access and purchase SP services available on multiple SP sites 50. The SP sites 50 communicate with an Online Broker 60 to authenticate individual users, record billing events, and (optionally) obtain and update user-specific access rights (an possibly other user information, as described below).

The registered users may connect to the Internet 30 in any known manner. For example, the users may use a suitable online services network to obtain access to the Internet, or may connect by establishing an account with an Internet Service Provider (not shown). Each user computer 40 includes at least one client application 42 (such as a World Wide Web browser) for communicating with server applications on the Internet 30. Each user computer 40 additionally includes a brokering client 44 which receives and generates responses to authentication or "challenge" messages from the SP sites 50.

The SP services are provided on the individual SP sites 50 of registered Service Providers. Each SP site 50 will typically comprise one or more physical servers that are connected to the Internet 30. Each SP site 50 runs at least one server application 52 for providing an online service. A given Service Provider or SP site 50 may, of course, provide many different online services. Some of these services may be generally accessible to the public, while others (primarily those for which a fee is charged) may be made available only to registered users. For purposes of the following description, it may be assumed that the term "SP service" refers only to the on-services that require user registration. Additionally, it may be assumed that the terms "user" and "Service Provider" refer only to registered users and Service Providers.

Although the user computers 30 and the SP sites 50 are shown as being connected directly to the Internet 30, it will be understood that such connection may be via one or more private networks. For example, a user computer 30 may connect to the Internet 30 via a private cable television network using a cable modem, and an SP site may connect to the Internet via a private network of the Service Provider's organization.

Various types of SP services may be offered by the Service Providers. For example, one Service Provider may provide a personalized investment portfolio service, while another Service Provider may provide an bulletin board system (BBS) for allowing users exchange information on pre-selected topics. Other SP services may include, for example, software download services, investment advice services, communications (e.g., email and Internet telephone) services, and access to online versions of selected printed publications. As user access speeds to the Internet increase, it is expected that the SP services will include high bandwidth services such as interactive games and downloads of movies, television shows and hi-fi audio.

The Service Providers are free to select any appropriate method for charging users for the online services rendered. For example, users may be charged in proportion to the amount of time spent on a given service, or, in the case of a magazine subscription or software download, may be charged a one time fee.

With further reference to FIG. 1, each SP site additionally includes brokering server components 54. The brokering server components 54 are preferably in the form of software modules which include the necessary logic for implementing the passthrough authentication protocol, and for forwarding billing events (generated by the server application) to the Online Broker. The brokering server components 54, may additionally include logic for updating and processing access rights data stored by the Online Broker.

The Online Brokering site 60 preferably comprises one or more physical servers that run a Brokering Agent application 62 to implement the Online Brokering Service. The site 60 is preferably operated by a single business, or a small collection of businesses, that is qualified to handle billing and security matters on behalf of the Service Providers. As described below, the Broker site 60 may communicate with the SP sites 50 (to handle authentication requests and billing events) either via the Internet (or other public network), a private network, a private communications channel, or a combination thereof.

Although a single Online Broker site 60 is shown in FIG. 1, it will recognized that multiple Online Broker sites could be provided on the Internet 30. For example, Online Broker sites could be set up at several different geographic locations to accommodate SP sites 50 located in different regions. Additionally, as with the user computers 40 and SP sites 50, the Online Broker site 60 may be connected to the Internet 30 via one or more private networks.

The Online Broker site 60 includes one or more databases 64 for storing various account information with respect to the users and Service Providers. This information preferably includes the passwords, unique IDs, access rights and bills (charges) of the users, and includes the passwords that have been assigned to the Service Providers. As noted above, the Broker site 60 may also store and provide access to a directory of the services available from the Service Providers, to help users locate such services.

Finally, the brokering site 60 may store, and make available to the service Providers, certain user-specific customization information that can be used by the Service Providers to tailor their respective services to individual users. This information may include, for example, the user's preferences with respect to the display of certain types of media, the geographic region (e.g., zip code) at which the user resides, the line speed (baud rate) at which the individual user connects to the Internet, or a description of the user computer 40. Such information may be specified by the user upon registration with the Online Broker, and/or may be interactively specified or updated by the user via a connection between the user computer and Online Broker site 60.

The customization information may be provided to the Service Providers (by the Online Broker) either automatically upon user authentication (along with the user's access rights information), or in response to queries from the Service Providers. The Service Providers can use this information customize their respective online services to individual users. For example, an SP site may use the customization information to provide the requested service to the user at a baud rate which is commensurate with the user's connection speed, or may adjust the resolution of graphics (or video) images to match the system characteristics (monitor resolution, connection speed, etc.) of the user computer 40. As will be recognized by those skilled in the art, many different types of customization information can be stored by the Online Broker 60.

3. Operation (FIGS. 2 and 3)

FIGS. 2 and 3 illustrate the basic steps that take place, in accordance with the invention, when a registered user accesses an SP site 50 and uses a service. In FIG. 2, the boxes shown in dashed lines represent optional steps, which may or may not be performed (depending upon the particular actions taken by the user.) In FIG. 3, the solid arrows between the user computer 40, SP site 50 and the Online Broker site 60 represent messages transmitted over the Internet 30 as part of an authentication sequence, with the numbers 1-5 indicating the order in which these messages are passed. The dashed arrows in FIG. 3 represent optional exchanges of information which are separate from the messages of the authentication sequence.

With reference to block 80 in FIG. 2, the user initially locates the SP service by obtaining the location information of the corresponding SP site 50. This location information may be in a variety of forms, such as a Uniform Resource Locator (URL), a Domain Name Service (DNS) name, or an Internet Protocol (IP) address. As illustrated by the corresponding dashed line 80' in FIG. 3, the user may optionally obtain this information using an online SP service directory provided by the Online Broker 60. Of course, the user may already have this information from a previous log-on session, or may obtain the information using another Internet directory service.

With reference to block 82, the user then attempts to use the SP service. As illustrated in FIG. 3, this involves the transmission of a "negotiate" message from the user's computer 40 to the SP site 50. This negotiate message includes the user's unique ID, which may be in the form of a unique username. (The user ID is preferably provided in the negotiate message in a masked form to prevent exposure to the Service Provider.) The brokering server software 54 on the SP site 50 responds to the negotiate message by sending a pseudo-random "challenge" message to the user computer 40.

In response to the challenge message, the brokering client 44 generates and returns a cryptographic "response" message, which is based on both the challenge message and the user's password. In the preferred embodiment, the response message is generated by combining the challenge message with the user's password in a predetermined manner (e.g., by interleaving the bits of the password with the bits of the challenge message), and then using a conventional one-way (i.e., non-reversible) hash algorithm such as MD4 (Message-Digest 4), to convert the challenge/password combination into a hash code. (For a description of the MD4 algorithm, see Rivest, R., "The MD4 Message Digest Algorithm," Proceedings, Crypto '90, Springer-Verlag, Aug. 1990. For a description of other cryptographic algorithms which may be used, see Stallings, W., Network and Internetwork Security, Prentice Hall, 1995.) Because the response message is generated using a one-way hash algorithm, the Service Provider cannot extract the user's password (or any other meaningful information) from the response message. Although a one-way hash algorithm is preferred, it will be recognized that other types of cryptographic algorithms can be used to generate the response message, including public key and private key encryption algorithms.

In order to generate the response message in the manner described above, the brokering client 44 must initially obtain the user's password. If the user has not recently accessed another SP site (e.g., during the last 20 minutes, or during the same Internet access session), the brokering client 44 obtains the password by prompting the user. If, on the other hand, the user has recently entered the password (e.g., upon accessing a previous SP site), the brokering client 44 re-uses the previously entered password, without prompting the user. This feature of the brokering client advantageously allows the user to access one SP site after another without having to re-enter the password.

The above-described method of requesting authentication is commonly referred to as a "challenge-response authentication" protocol. In the preferred embodiment, the particular protocol used is a variation of the NT Challenge-Response Authentication protocol (varied to permit pass-through verification, as described below), which is used by the Microsoft Windows NT operating system. This protocol, and other types of challenge-response authentication protocols which may be used, are described in Kaufman, Perlman and Speciner, Network Security: Private Communication in a Public World, Prentice Hall, 1995. Because all three entities (the user computer, the SP site, and the Online Broker site) participate in the authentication process with this type of protocol, a high degree of security is achieved.

With reference to block 84, once the response message has been received at the SP site 50, the Service Provider effectively asks the Online Broker to authenticate the user. This is done by sending an encrypted pass-through message (which includes the response message, the challenge message from which the response message was generated, and the user's unique ID) to the Online Broker site 60 for authentication, as illustrated in FIG. 3. To authenticate the user, the Online Broker site 50 initially accesses the brokering database 64 with the user's unique ID to look up the user's password. The Brokering Agent 62 then determines whether the received response message corresponds to the user's password and the received challenge message, to thereby authenticate the response message (and thus the user). This is done by generating the "correct" response from the password and the received challenge message (using the same one-way hash algorithm used by the user computer 40), and then comparing the correct response message to the received response message. If the two response messages match, the user is deemed to be authentic. Finally, the Online Broker site 60 returns a message to the SP site 50 to indicate whether or not the user was successfully authenticated.

This method of authentication is generally known as "pass-through" authentication, since the information needed to authenticate the user is passed-through to the entity capable of performing the authentication. Pass through authentication is commonly used within corporate networks, but is not commonly used on public networks such as the Internet. Although pass-through authentication is preferred, other authentication methods which generally conceal the user's identity and payment information from the Service Provider can be used. For example, the response message (generated by the user's computer 40) could be passed "directly" (i.e., by a path that does not include the SP site 50) to the Online Broker site 60 for verification. If the user is not successfully authenticated by the Online Brokering Service, the SP site 50 may send an error message to the user.

With reference to block 86, if the user is successfully authenticated, the Brokering Agent 62 retrieves from its databases 64 the user's access rights, if any, with respect to the SP site 50 which requested the authentication. These access rights may indicate, for example, the specific SP services that the user has subscribed to, and/or the actions that can be performed by the user (e.g., download, edit file, read-only access, etc.) upon accessing certain services. The Brokering Agent 62 may additionally retrieve other user-specific information, such as the user's display preferences or geographic region, that may be used by the SP site 50 to tailor its services to the particular user. The Online Broker site 60 returns this information to the SP site 50 (using a suitable encryption technique) as part of a verification message. This verification message additionally includes a unique but anonymous session ID which allows the Service Provider to bill the user for the services purchased. (The session ID, access rights data, and other user-specific information returned by the Online Broker site 60 are referred to generally as "session information.") The user is then permitted by the SP site 50 to access the requested service.

With further reference to FIG. 3, the client and server applications 42, 52, are preferably configured such that the challenge message (generated by the brokering server 54) and the response message (generated by the brokering client 44) are integrated within the application-level-protocol message stream between the client and server applications 42, 52. For example, if the client and server applications 42, 52 use HTTP (the Hyper Text Transfer Protocol) as the application level protocol, the applications 42, 52 are written (or modified, if such applications already exist) to integrate the negotiate, challenge and response messages with the HTTP message stream.

During the course of the service session between the user and the SP site 50, the user may request to purchase a service for which a fee is charged by the Service Provider. For example, the user may request a download of a software program sold by the Service Provider. This request may be in the form of a message from the client application 42 to the server application 52, and may be independent of the brokering software. If such a request is received by the SP site 50, the SP site uses the anonymous session ID assigned in step 86 to ask the Online Broker 60 to bill the user for a specified amount (by sending a billing event message to the Online Broker site 60), and the Online Broker site 60 in-turn updates its databases 64 to charge the user's account. This process of charging the user is illustrated by block 88 of FIG. 2, and by the corresponding arrow 88' in FIG. 3. The billing event message will normally include a user-readable description of the charge, which may be viewed by the user upon reviewing the online bill. Of course, the SP site 50 may send multiple billing events to the Online Broker site 60 during the course of a service session.

With reference to block 90 of FIG. 2, and the corresponding arrow 90' of FIG. 3, the SP site 50 may also send requests to the Broker site 60 to update the user's access rights. The SP site 50 may send such an update request, for example, if the user purchases (or cancels) a subscription to an online publication. On the following request by the SP site 50 to authenticate the user, this update to the user's access rights will be reflected in the session information provided to the SP site 50, and the SP site 50 can automatically provide the user with the appropriate access privileges.

Although the maintenance of user access rights data by the Online Broker site 60 advantageously provides for a high degree of user anonymity, it will be recognized that some or all of the access rights data could alternatively be stored by the SP sites 50.

When the user terminates the connection to the current SP site 50 and connects to a different SP site, the sequence of steps of blocks 80-90 of FIG. 2 (and the corresponding messages shown in FIG. 3) are be repeated. As indicated above, the user will not, however, be prompted for the password, since the brokering client 44 transparently caches and re-uses the password. (For security purposes, the brokering client 44 is preferably configured to "forget" the password when the user disconnects from the Internet, and when the user fails to connect to a new ST site within a predetermined period of time.) Thus, from the perspective of the user, the user is presented with a single log-on procedure, and is then presented with a series of online services that are customized to the user's preferences and access privileges. In this respect, the user sees what may be thought of as a virtual online services network.

With further reference to FIGS. 2 and 3, the user may, at any time, access the Online Broker site 60 to view a user-specific bill and/or to update the user-specific information (if any) stored by Online Brokering Service. This may be done using special components of the brokering client software 44. Advantageously, the bill shows all of the charges from all of the SP sites accessed by the user.

With further reference to FIG. 3, all of the messages passed between the user computer 40 and the SP site 50 are preferably transferred over the Internet (or over the particular distributed network in which the system is employed). In addition, once the user has been authenticated, the subsequent communications (not shown) between the client and server applications 42, 52 take place over the Internet. Thus, the system advantageously allows the users and the Service Providers to take advantage of the low cost and wide availability of the Internet, while providing features heretofore available only on trusted online services networks.

With respect to the messages passed between the SP site 50 and the Online Broker site 60, it is envisioned that the communications method will depend upon the particular Service Provider. For example, a Service Provider which conducts a relatively small amount of business on the Internet may prefer to communicate with the Online Broker 60 exclusively over the Internet, while a company that conducts a relatively large amount of business may prefer to set up a private, secure communications channel (to provide for greater security and possibly the faster exchange of messages) between SP site 50 and the Online Broker site 60. Other Service Providers may choose to communicate with the Online Broker site 60 via a private network.

4. Architecture of MSN-Based Implementation (FIG. 4)

A specific implementation in which the Online Broker site 60 resides entirely within MSN, and in which the SP site 50 is a Microsoft Windows NT based system, will now be described with reference to FIG. 4. This implementation makes extensive use of components that currently exist within MSN, including the MSN billing system and database 64A (hereinafter the "MSN billing system"), the MSN accounts database 64B, and the MSN security system and database 64C (hereinafter the "MSN security system"). The implementation also makes use of client components (described below) currently being used by MSN subscribers to access MSN. As described below, this MSN-based implementation will allow non-MSN subscribers (as well as regular MSN subscribers) to use an Online Brokering Service of MSN to purchase services over the Internet from independent Service Providers.

In FIG. 4, the reference numbers of the previous figures are re-used (with an appended character where appropriate) to indicate a correspondence between components. For example, the components labeled 44A and 44B in FIG. 4 correspond to the brokering client software 44 of FIGS. 1 and 3.

With reference to FIG. 4, the user computer 40 includes a client application 42 which makes calls to a client-side MSN Security Support Provider (MSN SSP) package 44A via the Microsoft Security Support Provider Interface (SSPI) 70A. Likewise, the SP site 50 includes at least one server application 52 which communicates with a server version 54A of the MSN SSP package via a server-side version 70B of the Microsoft SSPI. The client and server components 44A, 54A, 70A and 70B of the MSN SSP package and the Microsoft SSPI are available from Microsoft Corporation. Additionally, the client components 44A, 70A of the MSN SSP package and the Microsoft SSPI and are currently being shipped with the Microsoft Windows 95 operating system.

The MSN SSP package 44A, 54A is a set client-side and server-side dynamic link libraries (DLLs) which implement the Windows NT challenge-response protocol, as customized for use with MSN. The MSN SSP package is derived from the Microsoft Windows NT SSP, which implements the NT challenge-response protocol on networks that use the Microsoft Windows NT operating system. Unlike NT SSP, which forwards "response" messages to a domain controller for authentication, MSN SSP is configured to pass the response messages (via the SP site) to a Brokering Agent 62 of MSN.

The SSPI 70A, 70B is a standard interface which isolates applications (such as the client and server applications 42, 52) from the underlying details of the MSN SSP package, allowing applications to be written without regard to the type of security protocol used. The SSPI interface 70A is used by the Microsoft Windows NT operating system, and is documented, for example, in the help file of the Windows 32-bit Software Development Kit (Win32 SDK), available from Microsoft Corporation. Throughout the following description, the names of specific application program interfaces (APIs) of the Microsoft SSPI are italicized.

With further reference to FIG. 4, the user computer 40 also includes an MSN billing viewer application 44B for viewing a user-specific bill maintained within the MSN billing system 64A. This application is currently being shipped with the Microsoft Windows 95 operating system, and is used by MSN subscribers to view their respective billing statements on MSN. It is anticipated that this application will be modified to allow non-MSN subscribers (i.e., registered users who use MSN solely as an Online Broker) to access their brokering bills via the Internet.

The server site 50 site additionally includes a set of access rights components 54B. The access rights components 54B include a table 56 which maps MSN security tokens to corresponding NT groups on a one-to-one basis. (As described below, MSN tokens are numerical content identifiers that are used within MSN for efficiently storing access rights data, and NT groups are security entities used by the Microsoft Windows NT operating system.) This table 56, which is stored in the Windows NT registry, will be created by the Service Provider (assuming that the Service Provider wants to use native Windows NT access control using Access Control Lists), and will be used to convert user-specific access rights data stored within the MSN security system 64C to the Windows NT format recognized by the server application 52. The access rights components 54B also include a set of APIs for accessing and updating the table 56, including APIs that can be used by the Service Providers to manipulate table entries.

Although the preferred implementation depicted by FIG. 4 assumes that the server application 52 is a Microsoft Windows NT based application, the access rights components 54B can be adapted to convert MSN tokens to the security formats used by other platforms. For example, the access rights components 54B could be modified to covert MSN tokens to a security format recognized by UNIX. The server site 50 site also includes a set of billing components 54C for allowing the Service Provider to forward billing events to MSN 60. The billing components 54C are in the form of a set of APIs that can be called by the server application 52. These APIs are published to the Service Providers to permit the writing of server applications 52 which make use of the MSN billing system 64A. The billing events generated by calls to the billing components 54C are added to an active billing log file (not shown) at the SP site 50. This log file is periodically passed to a Brokering Agent package 62 (described below) within MSN, which forwards the billing events to the MSN billing system 64A.

The server site 50 additionally includes a Sysop Tools application 54D. This application includes a set of APIs which can be called by the server application 52 to make updates to the relevant access rights data (described below) stored within the database of the MSN security system 64C. These APIs act as a client (or "front end") to the security code of the MSN security system 64C. A preferred implementation of the Sysop Tools application 64C is described in detail in co-pending U.S. application Ser. No. 08/516,576 of the title SYSTEM AND METHOD FOR EDITING CONTENT IN AN ON-LINE NETWORK, filed Aug. 18, 1995, which is incorporated herein by reference. A preferred implementation of the MSN security system and database 64C is described in detail in co-pending U.S. application Ser. No. 08/516,573 of the title SYSTEM FOR CONTROLLING USER ACCESS, filed Aug. 18, 1995, which is also incorporated herein by reference.

With further reference to FIG. 4, the Online Brokering Service within MSN consists primarily of the Brokering Agent 62 (also referred to as the "authentication agent"), the MSN billing system 64A, the accounts database 64B, and the MSN security system 64C. The Brokering Agent 62 consists of a collection of DLLs which run on one or more physical servers (not shown) of the MSN data center, and which interact with the brokering database components 64A-C of MSN. (As described in the above-referenced patent applications, MSN comprises a data center in which services are distributed across physical servers of one or more local area networks, with different groups of servers running different service applications. Access to the MSN network can be obtained, via a series of gateway computers of the data center, either by a set of direct dial telephone numbers provided by Microsoft, or by the Internet.)

The primary function of the Brokering Agent 62 is to receive, process and respond to authentication requests from the various SP sites 50. The Brokering Agent 62 also receives billing events from the SP sites 50, and passes these billing events to the MSN billing system 64A for processing. The Brokering Agent 62 monitors a socket using TCP/IP, and is protected by MSN's firewall.

The MSN billing system 64A is a highly scalable client-server type database system which resides on a group of physical billing servers (not shown) within the MSN data center. Customers of the system are advantageously billed in their own respective currencies, and are provided with online account statements that can be viewed using the MSN billing viewer application 44B. The MSN billing system 64A is further described in co-pending U.S. application Ser. No. 08/518,253 of tile title BILLING SYSTEM FOR A NETWORK, filed Aug. 23, 1995, which is incorporated herein by reference. As described above, a set of client-side APIs are provided to the Service Providers, in accordance with the present invention, to permit billing events to be passed to the MSN billing system 64A. The Service Providers are also provided with documentation on proper billing formats.

The accounts database 64B is a scalable database system for storing various user account information for both MSN subscribers and registered users of the Online Brokering Service. The Brokering Agent 62 accesses the accounts database 64B to authenticate users in response to authentication requests from the various SP sites 50. The information stored for each user in the accounts database 64B includes, for example, the user's password, the user's unique ID (assigned upon registration), the user's account plan (specifying, for example, whether or not the user is an MSN subscriber), the user's name and address, and the optional user-specific customization information (described above) which is dynamically provided to the SP sites 50 (upon user authentication) to permit the customization of SP services.

The MSN security system 64C stores the access rights of individual MSN subscribers and, in accordance with the present invention, additionally stores the access rights of registered users of the Online Brokering Service. These access rights of the registered users specify the actions that can be performed by the users at the various SP sites 50. Access rights data is stored within the MSN security system 64C using security tokens (or simply "tokens"), which are unique numerical (32-bit) identifiers of the various "content categories" (also referred to as "service areas") for which user-specific access rights may be specified. For example, one token may represent all MSN public data (viewable by all MSN subscribers), while another may represent all "sysop only" data (viewable only by MSN system administrators), while another token may represent a pay service or service area of MSN for which user subscription is required. In accordance with the invention, tokens are assigned to the Service Providers upon registration with the Online Brokering Service, allowing the Service Providers to assign user-specific access rights to their respective SP services and service areas. The assignment of tokens to Service Provide is further described below.

Upon being queried (by the Brokering Agent 62 or some other entity within MSN) with a user's unique ID, the MSN security system 64C returns a user-specific "token list" which fully specifies all of the access rights of the MSN subscriber and/or registered user. (The manner in which the token lists are preferably stored within the database of the MSN security system 64C, and the process by which the token lists are retrieved, are described in detail in the above-referenced patent application of the title SYSTEM FOR CONTROLLING USER ACCESS.) With reference to FIG. 5, the token list 80 contains a set of tokens 82 together with a set of access rights bits 84 for each such token. The tokens 82 within the token list 80 indicate the service areas to which the user has at least some access rights. Thus, if a given token does not appear in the user's token list, the user cannot access the corresponding service area.

The access rights bits 84 associated with a given token 82 specify the user's particular access rights within the service area identified by the token. These access rights are in the form of privilege levels such as "viewer," "user," "host," "sysop," and "supersysop," with each access rights bit corresponding to a particular privilege level. These privilege levels are converted into specific access capabilities (such as read-only access, read/write access, read/write/delete access, etc.) by the service applications. This advantageously allows writers of MSN service applications to flexibly define the types of access capabilities to be given to different users, rather then being restricted to a pre-defined set of access capabilities.

In accordance with the invention, upon registration with the Online Brokering Service, each Service Provider is assigned at least one token which uniquely corresponds to the SP service or services of the Service Provider. In addition, the SP is given sysop privileges (via an MSN user account) with respect to these tokens This enables the SP to remotely make updates to the access rights stored with respect to these tokens using the Sysop Tools package 54D, as described in the above-referenced application of the title SYSTEM AND METHOD FOR EDITING CONTENT IN AN ON-LINE NETWORK.

To provide a specific example, a Service Provider that provides subscriptions to online magazines may be assigned 50 tokens, and each such token may inturn be assigned by the Service Provider to a particular magazine (or set of magazines) to which the Service Provider wishes to separately control user access. The service Provider would also be given sysop privileges with respect to the 50 tokens. Using the Sysop Tools package 54D (FIG. 4), the Service Provider can then update the respective token lists of the various users of the SP site 50, to thereby modify the users' access rights with respect to the different magazines.

Although it is believed that the access rights feature of the invention will be extremely useful to most Service Providers (since the Service Providers normally cannot store the access rights data themselves, because of user anonymity), it is contemplated that some Service Providers will have little or no use for the feature.

5. Operation of MSN-Based Implementation (FIGS. 4 and 6)

The operation of the MSN-based implementation will now be described with reference to FIG. 4, which illustrates the interactions between the system components once a socket connection has been established between the user computer 40 and the SP site 50, and with reference to FIG. 6, which illustrates the steps performed by the Brokering Agent 62 in response to an authentication request. In this operational description, it is assumed that the SP site 50 is in the form of a World Wide Web (WWW) server. Additionally, it is assumed that the server application 52 is a Microsoft Windows NT based application which uses HTTP to communicate with the client application 42.

In FIG. 4, the arrows shown in solid lines represent communications which occur as part of the authentication sequence, with the letters A-H indicating a preferred order in which these communications occur. The arrows shown in dashed lines represent communications which do not occur as part of the authentication sequence.

With reference to FIG. 4, messages A, B, and C are passed between the user computer 40 and the SP site 50 (over the Internet) as part of the above-described negotiate-challenge-response sequence. Although these messages are conceptually passed directly between the client and server MSN SSP packages 44A, 54A, it will be understood that these messages are actually integrated with the HTTP message stream between the client and server applications 42, 52.

Prior to the negotiate-challenge-response sequence, the client application 42 establishes a sockets layer communications session with the WWW server 50. The negotiate message is then generated by the client-side MSN SSP package 44A in response to an InitializeSecurityContext API call from the client application 42, and the client application 42 in-turn passes the negotiate message to the server application 52. In the preferred embodiment, the unique ID of the user (which may be in the form of a username) is included within the negotiate message. In other embodiments, the user's unique ID may be transmitted to the SP site with the response message. In response to the negotiate message, the server application 52 calls an AcceptSecurityContext API of the server-side SSPI 70B. This API call returns the challenge message, which is passed to the client application 42 over the Internet.

The client application 42 passes the challenge message to the MSN SSP package 44A via the InitializeSecurityContext API. In response to this API call, the MSN SSP package 44A generates and returns the response message, and computes a session key which may be used for the subsequent encryption of data between the client and server applications 42, 52. (It is envisioned that the session key will be used for encryption primarily by custom applications 42, 52, and that other applications will instead use standard encryption protocols such as the Secure Sockets Layer protocol or the Private Communications Technology protocol.) The response message is preferably generated from the user's password and the challenge message, in the same manner described above with reference to FIGS. 1 and 2. To obtain the user's password, the MSN SSP package 44A initially checks its password cache 72, and if no password is found, prompts the user for the password. The response message is then passed over the Internet to the server application 52, and the server application calls the AcceptSecurityContext API with the response message.

The call to AcceptSecurityContext returns an encrypted pass-through message which is forwarded to the Brokering Agent 62 over the Internet. (As indicated above, this pass-through message, and the subsequent response from the Brokering Agent 62, may alternatively be exchanged over a private network or communications channel.) This pass-through message, which serves as an authentication request from the WWW server 50, includes the original challenge message, the resulting response message, and the unique ID of the user.

FIG. 6 illustrates the primary steps that are performed by the Brokering Agent 62 in response to the authentication request. With reference to blocks 102-106 of FIG. 6, and the arrow labeled "E" in FIG. 4, the Brokering Agent 62 initially uses the unique ID to look up the user's password from the accounts database 64B. The Brokering Agent 62 then determines whether the response message was properly generated from the challenge message and the user's password. If not, the brokering a agent 62 returns an encrypted "NO" message to the WWW server, indicating that the authentication was unsuccessful.

With reference to blocks 108 and 110, if the Brokering Agent determines that the response message was properly generated, and is thus (presumably) authentic, the Brokering Agent 62 accesses the accounts database 64B to obtain the user-specific customization information (e.g., display preferences, connection speed, geographic region, etc.), if any, to be provided to the WWW site 50 with the subsequent verification message. In addition, the Brokering Agent 62 queries the MSN security system (as indicated by arrow "F" in FIG. 4) for the user's access rights with respect to the WWW site 50. This effectively involves a two-step process: First, the user's token list is obtained from the security database. This token list may include tokens (and corresponding access right data) which correspond to other service areas, such as internal MSN service areas and/or service areas of other SP sites 50. Second, the token list is filtered by retaining only those tokens to which the particular Service Provider making the authentication request has sysop privileges. The result is a filtered token list which specifies the user's access rights only with respect to the particular WWW server 50.

As indicated above, the steps corresponding to blocks 108 and 110 represent optional features which need not be used by the Service Providers. Accordingly, it is contemplated that the pass-through message will include a field for allowing the WWW server 50 to specify (1) the customization data to be returned, if any, and (2) whether the user's access rights should be returned.

With reference to block 112 of FIG. 6, the Brokering Agent 62 also computes a session key to be provided to the WWW server 50 for the subsequent encryption of data between the client and server applications 42, 52. This session key is generated using the same method used by the user computer 40 to generate the session key. The two session keys will thus be identical.

Finally, with reference to block 114 of FIG. 6 (and the arrow labeled "G" in FIG. 4), the Brokering Agent 62 returns an encrypted verification message to the WWW server 50. This verification message indicates that the authentication was successful, and includes the "session information" obtained in the steps of blocks; 108-112 of FIG. 6. As noted above, the verification message also includes a unique but anonymous session ID to be used by the WWW server 50 for generating billing events.

With reference to arrow "H" in FIG. 4, upon receiving the verification message, the server-side MSN SSP package 54A uses the access rights components 54B to convert the filtered token list returned by the Online Broker 60 to a corresponding list of NT groups to which the user belongs, and then looks up the SIDs (security IDs) which correspond to the NT groups. (In other embodiments, the server application 52 may be written to accept MSN tokens, in which case conversion to NT groups will be unnecessary.) The MSN SSP package 54A thereby converts the MSN access rights information to a format which is meaningful within the Microsoft Windows NT environment of the WWW server 50.

The MSN SSP package 54A thereafter uses a dummy account to impersonate the user on the WWW server 50 in the user's security context, to thereby provide user access consistent with the user's particular access rights. This is accomplished as follows: Initially, the MSN SSP package 54A calls the LsaLogonUser system function of Windows NT with the dummy account name and password, and passes the SIDs associated with the list of NT groups to the function. The LsaLogonUser function uses the dummy account to log onto the system as though the user were logging on interactively, and returns to the MSN SSP package an NT token for the logon along with an attached list of SIDs passed to the function. The MSN SSP package 54A then stores the NT token and attached SID list, and returns a user-specific context handle to the server application 52.

Thereafter, whenever the server application 52 needs to perform a resource-related service on behalf of the user, the server application calls the ImpersonateSecurityContext function of the MSN SSPI 70B with the user's context handle. Using the context handle, the ImpersonateSecurityContext retrieves the corresponding NT token and SID list, and attaches this NT token and SID list to the calling thread of the server application. This allows the calling thread to impersonate the user as the thread is executed on the WWW server 50.

As will be apparent from the foregoing, the authentication process is completely transparent to the user, with the exception of any additional delay caused by the interchange of messages between the SP site 50 and the Online Broker site 60. This added delay can be minimized by providing a high speed connection between the SP site 50 and the Online Broker site 60.

With reference to the dashed arrows labeled "I" in FIG. 4, billing events are generated by the server application 52 during the course of the user service session, and are added to an active billing log file (not shown) by making API calls to the billing components 54C. The active billing log file is periodically transferred to the Brokering Agent 62, which forwards the log file to the MSN billing system 64A. The billing log file is preferably transferred to MSN over a private, secure channel, but could alternatively be transferred over the Internet. The MSN billing system 64A parses the billing log files and records the specified charges to the accounts of individual users (using the assigned session IDs to identify the users).

With reference to dashed arrows "J" in FIG. 4, user access rights with respect to the SP site 50 are updated by placing an API call to the Sysop Tools package 54D. The Sysop Tools package 54D in-turn establishes a secure connection with the MSN security system 64C, and makes the requested update. By way of example, an SP site which provides multiple fee-based bulletin board systems (BBSs) may have a separate token for each BBS. When a user subscribes to a particular BBS service, the server application 52 would call the Sysop Tools package 54D, specifying both the anonymous session ID of the user and the 32-bit token which corresponds to the requested BBS. The Sysop Tools package 54D would pass this request to the MSN security system 64C, and assuming that the Service Provider has sysop privileges with respect to the token, the MSN security system would update its database to add the token to the user's token list.

With reference to dashed arrow "K" in FIG. 4, users may view the online billing statement either by logging directly onto MSN, or by accessing the MSN billing system 64A via the Internet. In other embodiments, user billing statements may additionally or alternatively be provided to users by email.

While certain preferred embodiments of the invention have been described, these embodiments have been presented by way of example only, and are not intended to limit the scope of the present invention. For example, although the disclosure has focussed on the use of the system and method to provide online services over public, untrusted, distributed networks such as the Internet, it will be appreciated that the disclosed system and method, and various features thereof, can be used to provide online services over other types of distributed networks, including private and hybrid public-private networks. Accordingly, the breadth and scope of the present invention should be defined only in accordance with the following claims and their equivalents.

Nichtpatentzitate
Referenz
1Business Week; Cover Story; No. 3398; p. 88; "Shielding The Net From Cyber-Scoundrels"; Edward C. Baig and John Carey; Nov. 14, 1994.
2 *Business Week; Cover Story; No. 3398; p. 88; Shielding The Net From Cyber Scoundrels ; Edward C. Baig and John Carey; Nov. 14, 1994.
3Cox, Benjamin T. H.; "Maintaining Privacy in Electronic Transactions" Aug. 1994.
4 *Cox, Benjamin T. H.; Maintaining Privacy in Electronic Transactions Aug. 1994.
5Cox, Benjamin; Tygar, J.D.; Sirbu Marvin; "NetBill Security and Transaction Protocol" Jul. 1995.
6 *Cox, Benjamin; Tygar, J.D.; Sirbu Marvin; NetBill Security and Transaction Protocol Jul. 1995.
7 *Horizon House Publications Inc., Telecommunications; vol. 28, No. 11; p. 12; ISSN: 0278 4831; CommerceNet Prefigures Explosion In Business Use Of The Internet ; Maureen Molloy; Nov. 1994 Byte; Cover Story; vol. 19; No. 10; p. 52; Don t Write Off The Internet; Oct. 1994.
8Horizon House Publications Inc., Telecommunications; vol. 28, No. 11; p. 12; ISSN: 0278-4831; "CommerceNet Prefigures Explosion In Business Use Of The Internet"; Maureen Molloy; Nov. 1994 Byte; Cover Story; vol. 19; No. 10; p. 52; Don't Write Off The Internet; Oct. 1994.
9 *http://www.ini.cmu.edu/netbill/pubs.html, Apr. 1997.
10 *Information Week; Client Server; p. 84; A Standard For Safety Net Providers Strive For Encryption and Authentication ; Jan. 30, 1995.
11Information Week; Client-Server; p. 84; "A Standard For Safety--Net Providers Strive For Encryption and Authentication"; Jan. 30, 1995.
12InformationWeek; Top Of The Week; p. 12; "Digital Dollars-Microsoft-Intuit Deal Speeds The Day When Most Financial Transactions Will Be Online"; Clinton Wilder with Bruce Caldwell; Oct. 31, 1994.
13 *InformationWeek; Top Of The Week; p. 12; Digital Dollars Microsoft Intuit Deal Speeds The Day When Most Financial Transactions Will Be Online ; Clinton Wilder with Bruce Caldwell; Oct. 31, 1994.
14Internet World; "New Deals"; Gary Welz; Jun. 1995.
15 *Internet World; New Deals ; Gary Welz; Jun. 1995.
16 *Network and Internetwork Security Principles and Practice; William Stallings, Ph.D; pp. 314 333; Copyright 1995.
17Network and Internetwork Security Principles and Practice; William Stallings, Ph.D; pp. 314-333; Copyright 1995.
18 *PC Magazine; vol. 13; No. 18, p. 87; ISSN: 0888 8507; Needed: A Fee Based Internet ; Bill Machrone; Oct. 25, 1994.
19PC Magazine; vol. 13; No. 18, p. 87; ISSN: 0888-8507; "Needed: A Fee-Based Internet"; Bill Machrone; Oct. 25, 1994.
20 *PC Magazine; vol. 14; No. 4; p. 31; ISSN: 0888 8507; Cybermall Meets Digicash Feb. 21, 1995.
21PC Magazine; vol. 14; No. 4; p. 31; ISSN: 0888-8507; Cybermall Meets Digicash Feb. 21, 1995.
22Schneier, Bruce; "Applied Cryptography: protocols, algorithms, and source code", library of congress No. TX-4-216-579, Oct. 1995.
23 *Schneier, Bruce; Applied Cryptography: protocols, algorithms, and source code , library of congress No. TX 4 216 579, Oct. 1995.
24Sirbu, Marvin A; "Internet Billing Service Design and Implementation" 1993.
25 *Sirbu, Marvin A; Internet Billing Service Design and Implementation 1993.
26 *Sirbu, Marvin; J.D. Tygar; NetBill: An Internet Commerce System Optimized for Network Delivered Services, Mar. 1995.
Referenziert von
Zitiert von PatentEingetragen Veröffentlichungsdatum Antragsteller Titel
US5893904 *14. Juni 199613. Apr. 1999Electronic Data Systems CorporationSystem and method for brokering the allocation of an item of business property
US5915093 *24. Apr. 199722. Juni 1999Howard BerlinComputer network debit disk used for prepayment to transfer information from a central computer
US5944824 *30. Apr. 199731. Aug. 1999Mci Communications CorporationSystem and method for single sign-on to a plurality of network elements
US5970477 *15. Juli 199619. Okt. 1999Bellsouth Intellectual Property Management CorporationMethod and system for allocating costs in a distributed computing network
US5983273 *16. Sept. 19979. Nov. 1999Webtv Networks, Inc.Method and apparatus for providing physical security for a user account and providing access to the user's environment and preferences
US5987523 *4. Juni 199716. Nov. 1999International Business Machines CorporationApplet redirection for controlled access to non-orginating hosts
US6006200 *22. Mai 199821. Dez. 1999International Business Machines CorporationMethod of providing an identifier for transactions
US6014666 *28. Okt. 199711. Jan. 2000Microsoft CorporationDeclarative and programmatic access control of component-based server applications using roles
US6023510 *24. Dez. 19978. Febr. 2000Philips Electronics North America CorporationMethod of secure anonymous query by electronic messages transported via a public network and method of response
US6023682 *21. Okt. 19978. Febr. 2000At&T CorporationMethod and apparatus for credit card purchase authorization utilizing a comparison of a purchase token with test information
US6032184 *24. Sept. 199829. Febr. 2000Mci Worldcom, Inc.Integrated interface for Web based customer care and trouble management
US6055567 *2. Febr. 199825. Apr. 2000Checkfree CorporationDistributed data accessing technique
US6055637 *27. Sept. 199625. Apr. 2000Electronic Data Systems CorporationSystem and method for accessing enterprise-wide resources by presenting to the resource a temporary credential
US6058379 *11. Juli 19972. Mai 2000Auction Source, L.L.C.Real-time network exchange with seller specified exchange parameters and interactive seller participation
US6065120 *9. Dez. 199716. Mai 2000Phone.Com, Inc.Method and system for self-provisioning a rendezvous to ensure secure access to information in a database from multiple devices
US6076108 *6. März 199813. Juni 2000I2 Technologies, Inc.System and method for maintaining a state for a user session using a web system having a global session server
US6084874 *30. Juni 19984. Juli 2000Storage Technology CorporationTemporary data transfer connections
US6085249 *5. Dez. 19974. Juli 2000Pictra, Inc.Method and apparatuses for transferring data for multiple applications through a single communication link in response to authentication information
US6098091 *30. Dez. 19961. Aug. 2000Intel CorporationMethod and system including a central computer that assigns tasks to idle workstations using availability schedules and computational capabilities
US6115040 *24. Sept. 19985. Sept. 2000Mci Communications CorporationGraphical user interface for Web enabled applications
US6115737 *24. Juli 19965. Sept. 2000Telcordia Technologies, Inc.System and method for accessing customer contact services over a network
US6119160 *13. Okt. 199812. Sept. 2000Cisco Technology, Inc.Multiple-level internet protocol accounting
US6154529 *5. Mai 199728. Nov. 2000Fujitsu LimitedMethod for providing information by calling from information provider, and service server for implementing the same
US6157924 *7. Nov. 19975. Dez. 2000Bell & Howell Mail Processing Systems CompanySystems, methods, and computer program products for delivering information in a preferred medium
US6173407 *11. Aug. 19989. Jan. 2001Electronics And Telecommunications Research InstituteMethod of authenticating and charging a client using a web infoshop service system
US61991149. Nov. 19996. März 2001Webtv Networks, Inc.Initiating a user session at an internet terminal using a smart card
US6226678 *25. Sept. 19961. Mai 2001Netspeak CorporationMethod and apparatus for dynamically defining data communication utilities
US62336087. Juni 199915. Mai 2001Openwave Systems Inc.Method and system for securely interacting with managed data from multiple devices
US6236991 *26. Nov. 199722. Mai 2001International Business Machines Corp.Method and system for providing access for categorized information from online internet and intranet sources
US6256671 *24. Juni 19983. Juli 2001Nortel Networks LimitedMethod and apparatus for providing network access control using a domain name system
US626336930. Okt. 199817. Juli 2001Cisco Technology, Inc.Distributed architecture allowing local user authentication and authorization
US6272523 *20. Dez. 19967. Aug. 2001International Business Machines CorporationDistributed networking using logical processes
US6282575 *11. Dez. 199728. Aug. 2001Intel CorporationRouting mechanism for networks with separate upstream and downstream traffic
US6289461 *9. Juni 199811. Sept. 2001Placeware, Inc.Bi-directional process-to-process byte stream protocol
US62953562. Mai 200025. Sept. 2001Cisco Technology, Inc.Power feed for network devices
US6295522 *11. Juli 199725. Sept. 2001Cybercash, Inc.Stored-value card value acquisition method and apparatus
US62983834. Jan. 19992. Okt. 2001Cisco Technology, Inc.Integration of authentication authorization and accounting service and proxy service
US630160112. Juli 19999. Okt. 2001Microsoft CorporationDisabling and enabling transaction committal in transactional application components
US63112198. Febr. 200030. Okt. 2001International Business Machines CorporationSystem and method for locating resources in a distributed network
US63112753. Aug. 199830. Okt. 2001Cisco Technology, Inc.Method for providing single step log-on access to a differentiated computer network
US6327707 *1. Juni 19994. Dez. 2001Micron Technology, Inc.Method, programmed medium and system for customizing pre-loaded software
US6330610 *4. Dez. 199711. Dez. 2001Eric E. DocterMulti-stage data filtering system employing multiple filtering criteria
US6338081 *5. Juni 19988. Jan. 2002International Business Machines CorporationMessage handling method, Message handling apparatus, and memory media for storing a message handling apparatus controlling program
US634332317. Dez. 199829. Jan. 2002More Magic Software Mms OyResource retrieval over a source network determined by checking a header of the requested resource for access restrictions
US637799324. Sept. 199823. Apr. 2002Mci Worldcom, Inc.Integrated proxy interface for web based data management reports
US6377994 *15. Apr. 199623. Apr. 2002International Business Machines CorporationMethod and apparatus for controlling server access to a resource in a client/server system
US638164424. Sept. 199830. Apr. 2002Mci Worldcom, Inc.Integrated proxy interface for web based telecommunications network management
US638564424. Sept. 19987. Mai 2002Mci Worldcom, Inc.Multi-threaded web based user inbox for report management
US638572430. Nov. 19987. Mai 2002Microsoft CorporationAutomatic object caller chain with declarative impersonation and transitive trust
US640107728. Mai 19994. Juni 2002Network Commerce, Inc.Method and system for providing additional behavior through a web page
US64306196. Mai 19996. Aug. 2002Cisco Technology, Inc.Virtual private data network session count limitation
US6434619 *29. Apr. 199813. Aug. 2002Alcatel Canada Inc.Internet-enabled service management system and method
US6446108 *22. Apr. 19983. Sept. 2002Lucent Technologies Inc.Method for wide area network service location
US6446128 *1. Dez. 19973. Sept. 2002Netselector, Inc.Site access via intervening control layer
US64533508. Febr. 200017. Sept. 2002International Business Machines CorporationSystem and method for locating resources in a distributed network
US6457040 *15. Jan. 199924. Sept. 2002Kabushiki Kaisha ToshibaMethod and system for a distributed network computing system for providing application services
US64669776. Mai 199915. Okt. 2002Cisco Technology, Inc.Proxy on demand
US6470318 *1. März 199922. Okt. 2002Lisabeth H. CoakleyComputer-implemented trademark brokerage network
US647038624. Sept. 199822. Okt. 2002Worldcom, Inc.Integrated proxy interface for web based telecommunications management tools
US647340724. Sept. 199829. Okt. 2002Worldcom, Inc.Integrated proxy interface for web based alarm management tools
US647374029. Nov. 199829. Okt. 2002Qpass, Inc.Electronic commerce using a transaction network
US648089413. Juni 200012. Nov. 2002I2 Technologies Us, Inc.System and method for maintaining a state for a user session using a web system
US648766530. Nov. 199826. Nov. 2002Microsoft CorporationObject security boundaries
US6487667 *14. Apr. 200026. Nov. 2002Gary S. BrownSystem for remote pass-phrase authentication
US64902893. Nov. 19983. Dez. 2002Cisco Technology, Inc.Multiple network connections from a single PPP link with network address translation
US649029030. Dez. 19983. Dez. 2002Cisco Technology, Inc.Default internet traffic and transparent passthrough
US649062024. Sept. 19983. Dez. 2002Worldcom, Inc.Integrated proxy interface for web based broadband telecommunications management
US6502137 *9. Okt. 199731. Dez. 2002International Business Machines CorporationSystem and method for transferring information over a computer network
US65021923. Sept. 199831. Dez. 2002Cisco Technology, Inc.Security between client and server in a computer network
US65104637. Dez. 200021. Jan. 2003Ipass, Inc.Service quality monitoring process
US651596824. Sept. 19984. Febr. 2003Worldcom, Inc.Integrated interface for real time web based viewing of telecommunications network call traffic
US6519642 *23. Jan. 199811. Febr. 2003Peregrine Force, Inc.System and method for creating, executing and maintaining cross-enterprise processes
US652641630. Juni 199825. Febr. 2003Microsoft CorporationCompensating resource managers
US65299556. Mai 19994. März 2003Cisco Technology, Inc.Proxy session count limitation
US65358809. Mai 200018. März 2003Cnet Networks, Inc.Automated on-line commerce method and apparatus utilizing a shopping server verifying product information on product selection
US6542583 *6. März 19971. Apr. 2003Avaya Technology Corp.Caller identification verification system
US6546488 *21. Sept. 19988. Apr. 2003Hughes Electronics CorporationBroadcast delivery of information to a personal computer for local storage and access
US656785027. Okt. 199920. Mai 2003Yodlee, Inc.System and method for determining revenue from an intermediary derived from servicing data requests
US657466124. Sept. 19983. Juni 2003Mci Communications CorporationIntegrated proxy interface for web based telecommunication toll-free network management using a network manager for downloading a call routing tree to client
US657473630. Nov. 19983. Juni 2003Microsoft CorporationComposable roles
US65780751. Juli 199710. Juni 2003More Magic Holdings, Inc.Methods and arrangements for distributing services and/or programs in a network environment
US6578079 *14. Okt. 199810. Juni 2003British Telecommunications Public Limited CompanyCommunications node for providing network based information service
US6587836 *24. Sept. 19981. Juli 2003Worldcom, Inc.Authentication and entitlement for users of web based data management programs
US659130421. Juni 19998. Juli 2003Cisco Technology, Inc.Dynamic, scaleable attribute filtering in a multi-protocol compatible network access environment
US659816724. Sept. 199822. Juli 2003Worldcom, Inc.Secure customer interface for web based data management
US66041983. Mai 20025. Aug. 2003Microsoft CorporationAutomatic object caller chain with declarative impersonation and transitive trust
US660670824. Sept. 199812. Aug. 2003Worldcom, Inc.Secure server architecture for Web based data management
US660671129. Okt. 200212. Aug. 2003Microsoft CorporationObject security boundaries
US661525824. Sept. 19982. Sept. 2003Worldcom, Inc.Integrated customer interface for web based data management
US6625651 *30. Nov. 199923. Sept. 2003Accenture LlpOn-line transaction control during activation of local telecommunication service
US663140224. Sept. 19987. Okt. 2003Worldcom, Inc.Integrated proxy interface for web based report requester tool set
US663142528. Okt. 19977. Okt. 2003Microsoft CorporationJust-in-time activation and as-soon-as-possible deactivation or server application components
US6636899 *24. Sept. 199821. Okt. 2003Xerox CorporationArchitecture for software for remote maintenance of a machine such as a copier
US664378214. Juni 20014. Nov. 2003Cisco Technology, Inc.Method for providing single step log-on access to a differentiated computer network
US66548014. Jan. 199925. Nov. 2003Cisco Technology, Inc.Remote system administration and seamless service integration of a data communication network management system
US66786964. Jan. 199913. Jan. 2004Microsoft CorporationTransaction processing of distributed objects with declarative transactional attributes
US6697865 *4. Jan. 200024. Febr. 2004E.Piphany, Inc.Managing relationships of parties interacting on a network
US670131520. Juni 20002. März 2004Bell & Howell Mail And Messaging Technologies CompanySystems, methods, and computer program products for delivering information in a preferred medium
US6711551 *7. Dez. 199823. März 2004Netzero, Inc.Information provider, terminal and system and recording medium for the terminal
US671493310. Apr. 200230. März 2004Cnet Networks, Inc.Content aggregation method and apparatus for on-line purchasing system
US671496216. März 200030. März 2004Microsoft CorporationMulti-user server application architecture with single-user object tier
US671497924. Sept. 199830. März 2004Worldcom, Inc.Data warehousing infrastructure for web based reporting tool
US671846728. Okt. 19996. Apr. 2004Cisco Technology, Inc.Password based protocol for secure communications
US672522227. Febr. 200320. Apr. 2004Cnet Networks, Inc.Automated on-line commerce method and apparatus utilizing shopping servers which update product information on product selection
US672525017. Dez. 199820. Apr. 2004Ellis, Iii Frampton E.Global network computers
US673214126. Nov. 19974. Mai 2004Frampton Erroll EllisCommercial distributed processing by personal computers over the internet
US673216730. Nov. 19994. Mai 2004Accenture L.L.P.Service request processing in a local service activation management environment
US6732181 *26. Juni 20024. Mai 2004Alcatel Canada Inc.Internet-enabled service management and authorization system and method
US67421267. Okt. 199925. Mai 2004Cisco Technology, Inc.Method and apparatus for identifying a data communications session
US674522924. Sept. 19981. Juni 2004Worldcom, Inc.Web based integrated customer interface for invoice reporting
US675123615. Dez. 200015. Juni 2004Cisco Technology, Inc.Configurable channel associated signaling (“CAS”) line signaling using plain text strings
US675483329. Sept. 199922. Juni 2004Openwave Systems Inc.Method for generating and distributing telecom and internet revenue
US67716384. Apr. 20003. Aug. 2004Storage Technology CorporationSystem and method for temporary data transfer
US677166531. Aug. 20003. Aug. 2004Cisco Technology, Inc.Matching of RADIUS request and response packets during high traffic volume
US67924577. Juni 200014. Sept. 2004Cisco Systems, Inc.Multiple-level internet protocol accounting
US681327830. Nov. 19992. Nov. 2004Accenture LlpProcess for submitting and handling a service request in a local service management system
US681376928. Okt. 19972. Nov. 2004Microsoft CorporationServer application components with control over state duration
US681690131. Jan. 20039. Nov. 2004Cisco Technology, Inc.Proxy session count limitation
US6826695 *4. Jan. 200030. Nov. 2004International Business Machines CorporationMethod and system for grouping of systems in heterogeneous computer network
US6829595 *26. Juni 19987. Dez. 2004Valista, Inc.MicroTrac internet billing solutions
US683680330. Nov. 199928. Dez. 2004Accenture LlpOperations architecture to implement a local service activation management system
US685978324. Sept. 199822. Febr. 2005Worldcom, Inc.Integrated interface for web based customer care and trouble management
US6871220 *27. Okt. 199922. März 2005Yodlee, Inc.System and method for distributed storage and retrieval of personal information
US68712244. Jan. 199922. März 2005Cisco Technology, Inc.Facility to transmit network management data to an umbrella management system
US687996514. Juni 200112. Apr. 2005Passgate CorporationMethod, system and computer readable medium for web site account and e-commerce management from a central location
US688603731. März 200026. Apr. 2005Ncr CorporationChannel director for cross-channel customer interactions
US68952341. Okt. 199917. Mai 2005Openwave Systems Inc.Method and apparatus for accessing a common database from a mobile device and a computing device
US6895434 *3. Jan. 200017. Mai 2005Cisco Technology, Inc.Sharing of NAS information between PoPs
US690731522. Mai 200314. Juni 2005Amazon.Com, Inc.Method and system for displaying and editing of information
US691006720. Juni 200221. Juni 2005Cisco Technology, Inc.Virtual private data network session count limitation
US6915272 *23. Febr. 20005. Juli 2005Nokia CorporationSystem and method of secure payment and delivery of goods and services
US6925469 *5. Sept. 20012. Aug. 2005Intertainer, Inc.Digital entertainment service platform
US6938022 *12. Mai 200030. Aug. 2005Tara C. SinghalMethod and apparatus for facilitating an anonymous information system and anonymous service transactions
US6941363 *25. Mai 20016. Sept. 2005Fujitsu LimitedTransaction management system and program for configuring online shopping system
US6944669 *23. Okt. 200013. Sept. 2005America Online, Inc.Sharing the personal information of a network user with the resources accessed by that network user
US6948063 *23. Dez. 199920. Sept. 2005Checkfree CorporationSecuring electronic transactions over public networks
US695093915. Okt. 200127. Sept. 2005Sony CorporationPersonal transaction device with secure storage on a removable memory device
US6957199 *5. Juni 200118. Okt. 2005Douglas FisherMethod, system and service for conducting authenticated business transactions
US69594425. Aug. 200325. Okt. 2005Xerox CorporationArchitecture for software for remote maintenance of a machine such as a copier
US696177812. Juli 20021. Nov. 2005Accenture LlpManagement interface between a core telecommunication system and a local service provider
US696600414. Aug. 200315. Nov. 2005Cisco Technology, Inc.Method for providing single step log-on access to a differentiated computer network
US6970901 *15. Dez. 199829. Nov. 2005Siemens AktiengesellschaftDevice and method for swapping out a part of a service logic program
US6978296 *28. Sept. 200120. Dez. 2005Sony CorporationMethod for registering a terminal with an internet service provider
US698325923. Juni 20003. Jan. 2006Ebs Group LimitedAnonymous trading system
US698593520. Dez. 200010. Jan. 2006Cisco Technology, Inc.Method and system for providing network access to PPP clients
US698594513. Dez. 200210. Jan. 2006Ipass, Inc.Service quality monitoring process
US698825015. Febr. 200017. Jan. 2006Hewlett-Packard Development Company, L.P.Trusted computing platform using a trusted device assembly
US7003473 *27. Dez. 200021. Febr. 2006Wisor Telecom CorporationFully integrated service manager with automatic flow-through interconnection
US7003546 *13. Okt. 199921. Febr. 2006Chris CheahMethod and system for controlled distribution of contact information over a network
US7010536 *28. Jan. 19997. März 2006Pattern Intelligence, Inc.System and method for creating and manipulating information containers with dynamic registers
US70168759. Okt. 200121. März 2006Enfotrust Networks, Inc.Single sign-on for access to a central data repository
US70168777. Nov. 200121. März 2006Enfotrust Networks, Inc.Consumer-controlled limited and constrained access to a centrally stored information account
US70238799. März 20014. Apr. 2006Cisco Technology, Inc.Dynamic multi-hop ingress to egress L2TP tunnel mapping
US702438623. Juni 20004. Apr. 2006Ebs Group LimitedCredit handling in an anonymous trading system
US702444920. Mai 19994. Apr. 2006Ellis Iii Frampton EGlobal network computers
US702673020. Dez. 200211. Apr. 2006Cisco Technology, Inc.Integrated connector unit
US7028033 *2. Jan. 200111. Apr. 2006Hall Aluminum LlcMethod and apparatus for simplified access to online services
US7031963 *9. Nov. 199818. Apr. 2006Unisys CorporationGreen ice printout sorting and delivery program
US703196424. Febr. 199918. Apr. 2006Openwave Systems Inc.Providing a directory of frequently used hyperlinks on a remote server
US7032002 *27. Okt. 200018. Apr. 2006Xanboo, Inc.Service broker for processing data from a data network
US703211327. Apr. 200118. Apr. 2006Moldflow Ireland, Ltd.Network enabled application software system and method
US70358254. Jan. 200025. Apr. 2006E.Piphany, Inc.Managing relationships of parties interacting on a network
US703590616. Mai 200025. Apr. 2006Ellis Iii Frampton EGlobal network computers
US70435537. Okt. 19999. Mai 2006Cisco Technology, Inc.Method and apparatus for securing information access
US704373314. Juni 20049. Mai 2006Microsoft CorporationServer application components with control over state duration
US704373415. Febr. 20059. Mai 2006Microsoft CorporationComponent self-deactivation while client holds a returned reference
US70475598. Nov. 200116. Mai 2006Sony CorporationInformation processing apparatus and method, recording medium, and service providing system
US70475637. Dez. 200016. Mai 2006Cisco Technology, Inc.Command authorization via RADIUS
US705100212. Juni 200323. Mai 2006Cardinalcommerce CorporationUniversal merchant platform for payment authentication
US705860024. Sept. 19986. Juni 2006Mci, Inc.Integrated proxy interface for web based data management reports
US7058816 *26. März 20026. Juni 2006Digeo, Inc.Apparatus and method for content entry management
US706114228. Mai 200313. Juni 2006Cisco Technology, Inc.Inline power device detection
US706277015. Febr. 200513. Juni 2006Microsoft CorporationRecycling components after self-deactivation
US70764473. Sept. 199911. Juli 2006Inphonic, Inc.Systems and methods for aggregating buyers for the purchase of telecommunication services via a network
US707665518. Juni 200211. Juli 2006Hewlett-Packard Development Company, L.P.Multiple trusted computing environments with verifiable environment identities
US707678422. Okt. 199911. Juli 2006Microsoft CorporationSoftware component execution management using context objects for tracking externally-defined intrinsic properties of executing software components within an execution environment
US708242611. Sept. 200325. Juli 2006Cnet Networks, Inc.Content aggregation method and apparatus for an on-line product catalog
US709946326. Mai 200429. Aug. 2006Cisco Technology, Inc.Method and apparatus for detecting a compatible phantom powered device using common mode signaling
US7103659 *9. Apr. 20025. Sept. 2006Cisco Technology, Inc.System and method for monitoring information in a network environment
US710379917. Aug. 20015. Sept. 2006Placeware, Inc.Bi-directional process-to-process byte stream protocol
US7117167 *22. März 20013. Okt. 2006Amazon.Com, Inc.Systems, methods, and computer-readable media for controlling delivery of digital products to users
US7124172 *2. Nov. 200017. Okt. 2006Sony CorporationMethod for providing anonymous browsing by transferring a request from a server to a relaying apparatus in response to the request generated at a client computer
US7131574 *19. Juli 20007. Nov. 2006Lasercard CorporationOptical memory card based e-commerce business method
US713927627. Febr. 200121. Nov. 2006Cisco Technology, Inc.Load sharing between L2TP tunnels
US71400362. März 200121. Nov. 2006Cardinalcommerce CorporationCentralized identity authentication for electronic communication networks
US714972430. Okt. 200012. Dez. 2006Sky Technologies, LlcSystem and method for an automated system of record
US715175330. Jan. 200219. Dez. 2006Telefonaktiebolaget Lm Ericsson (Publ)System and method for establishing a conference call
US715921018. Juni 20022. Jan. 2007Hewlett-Packard Development Company, L.P.Performing secure and insecure computing operations in a compartmented operating system
US716245830. Okt. 20009. Jan. 2007Sky Technologies, LlcSystem and method for process mining
US7165181 *27. Nov. 200216. Jan. 2007Intel CorporationSystem and method for establishing trust without revealing identity
US7174391 *29. Mai 20016. Febr. 2007Casio Computer Co., Ltd.Method for responding to site access
US71844157. Dez. 200127. Febr. 2007Telefonaktiebolaget Lm Ericsson (Publ)Service access system and method in a telecommunications network
US718498223. Juni 200027. Febr. 2007Ebs Group LimitedArchitecture for anonymous trading system
US718811011. Dez. 20006. März 2007Sony CorporationSecure and convenient method and apparatus for storing and transmitting telephony-based data
US71912392. Aug. 200113. März 2007Ipass Inc.Method and system to customize and update a network connection application for distribution to multiple end-users
US719443714. Mai 199920. März 2007Amazon.Com, Inc.Computer-based funds transfer system
US719444230. Okt. 200020. März 2007Sky Technologies, LlcSystem and method for automated, iterative development negotiations
US7194515 *3. Apr. 200320. März 2007Google Inc.Method and system for selectively blocking delivery of bulk electronic mail
US7200578 *12. Nov. 19983. Apr. 2007Citicorp Development Center, Inc.Method and system for anonymizing purchase data
US722524924. Sept. 199829. Mai 2007Mci, LlcIntegrated systems for providing communications network management services and interactive generating invoice documents
US72284177. Nov. 20025. Juni 2007America Online, Inc.Simple secure login with multiple-authentication providers
US7233992 *14. Jan. 200019. Juni 2007Comerica Bank-CaliforniaComputerized method and system for managing the exchange and distribution of confidential documents
US7237037 *1. Okt. 200126. Juni 2007Hewlett-Packard Development Company, L.P.Combined message broker
US72401129. Mai 20053. Juli 2007Ipass Inc.Service quality monitoring process
US724604614. Juni 200217. Juli 2007Coakley Lisabeth HComputer-implemented trademark brokerage network
US725163311. Dez. 200131. Juli 2007Sony CorporationMethod or system for executing deferred transactions
US72575816. Aug. 200114. Aug. 2007Guardian Networks, LlcStorage, management and distribution of consumer information
US7257610 *30. Nov. 200114. Aug. 2007Microsoft CorporationSystems and methods for sending coordinated notifications
US7277124 *25. Juli 20022. Okt. 2007Canon Kabushiki KaishaImage sensing apparatus, information processing apparatus, control method for these apparatuses, image processing apparatus and method, and image processing system
US727791128. Juni 20052. Okt. 2007Chris CheahMethod and system for controlled distribution of contact profiles over a network
US727796131. Okt. 20002. Okt. 2007Iprivacy, LlcMethod and system for obscuring user access patterns using a buffer memory
US728098127. Aug. 20029. Okt. 2007Visa U.S.A. Inc.Method and system for facilitating payment transactions using access devices
US7281263 *23. Febr. 20019. Okt. 2007Sprint Communications Company L.P.System and method for managing security access for users to network systems
US72902782. Okt. 200330. Okt. 2007Aol Llc, A Delaware Limited Liability CompanyIdentity based service system
US73024116. März 200127. Nov. 2007Checkfree CorporationElectronic Billing with required viewing of supplemental information
US7305472 *18. Febr. 20054. Dez. 2007Microsoft CorporationMethod for downloading a web page to a client for efficient display on a television screen
US730547517. Sept. 20034. Dez. 2007Webmd HealthSystem and method for enabling a client application to operate offline from a server
US730842611. Aug. 199911. Dez. 2007C-Sam, Inc.System and methods for servicing electronic transactions
US73084298. Febr. 200011. Dez. 2007Tozzi Mario SElectronic withdrawal authorization store and forward for cash and credit accounts
US730857631. Dez. 200111. Dez. 2007Intel CorporationAuthenticated code module
US731823516. Dez. 20028. Jan. 2008Intel CorporationAttestation using both fixed token and portable token
US7324972 *22. Juni 200029. Jan. 2008Clickshare Service CorporationManaging transactions on a network: four or more parties
US732505813. Nov. 200029. Jan. 2008Cisco Technology, Inc.Method and system for controlling subscriber access in a network capable of establishing connections with a plurality of domain sites
US732803016. Juni 20045. Febr. 2008Openwave Systems Inc.Method and apparatus for accessing a common database from a mobile device and a computing device
US733395223. Juni 200019. Febr. 2008Ebs Group LimitedCompound order handling in an anonymous trading system
US733403713. März 200219. Febr. 2008Netselector, Inc.Systems and methods for site access
US733412831. Mai 200519. Febr. 2008Checkfree CorporationAccessing information on a network using an extended network universal resource locator
US7340438 *21. Mai 20014. März 2008Nokia CorporationMethod and apparatus for managing and enforcing user privacy
US734657728. Aug. 200018. März 2008Javien Digital Payment Solutions, Inc.Third-party billing system and method
US73466977. Sept. 200418. März 2008Cisco Technology, Inc.Multiple-level internet protocol accounting
US735650713. Aug. 20018. Apr. 2008Amazon.Com, Inc.Network based user-to-user payment service
US736629721. Mai 200329. Apr. 2008Cisco Technology, Inc.Method and system for converting alternating current to ethernet in-line power
US736630530. Sept. 200329. Apr. 2008Intel CorporationPlatform and method for establishing trust without revealing identity
US736669023. Juni 200029. Apr. 2008Ebs Group LimitedArchitecture for anonymous trading system
US73666968. Okt. 199929. Apr. 2008Checkfree CorporationElectronic billing with flexible biller controlled electronic bill presentment
US7366786 *10. März 200429. Apr. 2008Alcatel-LucentInternet-enabled service management and authorization system and method
US7366897 *28. Febr. 200229. Apr. 2008International Business Machines CorporationMethod and system for communication via a computer network
US73700141. Nov. 20016. Mai 2008Metavante CorporationElectronic bill presentment and payment system that obtains user bill information from biller web sites
US7373312 *4. Dez. 200013. Mai 2008Ebay Inc.Method and apparatus for facilitating user registration in an on-line auction environment
US737352824. Nov. 200413. Mai 2008Cisco Technology, Inc.Increased power for power over Ethernet applications
US737683221. Apr. 200320. Mai 2008International Business Machines CorporationDistributed method, system and computer program product for establishing security in a publish/subscribe data processing broker network
US737697421. Nov. 200220. Mai 2008Hewlett-Packard Development Company, L.P.Apparatus and method for creating a trusted environment
US738935411. Dez. 200017. Juni 2008Cisco Technology, Inc.Preventing HTTP server attacks
US738951426. Mai 200417. Juni 2008Microsoft CorporationSoftware component execution management using context objects for tracking externally-defined intrinsic properties of executing software components within an execution environment
US7404203 *6. Mai 200322. Juli 2008Oracle International CorporationDistributed capability-based authorization architecture
US740970415. Juli 19995. Aug. 2008Telefonaktiebolaget L M Ericsson (Publ)System and method for local policy enforcement for internet service providers
US741198122. Juni 200412. Aug. 2008Cisco Technology, Inc.Matching of radius request and response packets during high traffic volume
US7415610 *26. Juli 200619. Aug. 2008Checkfree CorporationFacilitating access to information stored on a network using an extended network universal resource locator
US74209324. Apr. 20022. Sept. 2008Cisco Technology, Inc.Default internet traffic and transparent passthrough
US7426530 *12. Juni 200016. Sept. 2008Jpmorgan Chase Bank, N.A.System and method for providing customers with seamless entry to a remote server
US7426638 *30. Juni 200616. Sept. 2008Checkfree CorporationControlling access to information on a network using an extended network universal resource locator
US74438654. Apr. 200228. Okt. 2008Cisco Technology, Inc.Multiple network connections from a single PPP link with network address translation
US744460112. Okt. 200528. Okt. 2008Hewlett-Packard Development Company, L.P.Trusted computing platform
US744465511. Juni 200228. Okt. 2008Microsoft CorporationAnonymous aggregated data collection
US744466625. Juli 200228. Okt. 2008Hewlett-Packard Development Company, L.P.Multi-domain authorization and authentication
US745110629. Nov. 199911. Nov. 2008E-Lynxx CorporationSystem and method for competitive pricing and procurement of customized goods and services
US745461111. Jan. 200718. Nov. 2008Intel CorporationSystem and method for establishing trust without revealing identity
US74580835. Aug. 200325. Nov. 2008Xerox CorporationArchitecture for software for interactively communicate with a machine and remotely maintenance the machine
US746714120. Aug. 200116. Dez. 2008Grdn. Net Solutions, LlcBranding and revenue sharing models for facilitating storage, management and distribution of consumer information
US746737025. März 200516. Dez. 2008Hewlett-Packard Development Company, L.P.Apparatus and method for creating a trusted environment
US74693415. Apr. 200223. Dez. 2008Ipass Inc.Method and system for associating a plurality of transaction data records generated in a service access system
US747806827. März 200213. Jan. 2009Sony CorporationSystem and method of selecting consumer profile and account information via biometric identifiers
US74871306. Jan. 20063. Febr. 2009Grdn. Net Solutions, LlcConsumer-controlled limited and constrained access to a centrally stored information account
US7487535 *1. Febr. 20023. Febr. 2009Novell, Inc.Authentication on demand in a distributed network environment
US749007010. Juni 200410. Febr. 2009Intel CorporationApparatus and method for proving the denial of a direct proof signature
US749310518. März 200317. Febr. 2009Simplexity, LlcCertification and activation of used phones on a wireless carrier network
US74933951. Sept. 200417. Febr. 2009Cisco Technology, Inc.Virtual private data network session count limitation
US750285124. Jan. 200510. März 2009Cisco Technology, Inc.Facility to transmit network management data to an umbrella management system
US750602024. Aug. 200117. März 2009Frampton E EllisGlobal network computers
US75095054. Jan. 200524. März 2009Cisco Technology, Inc.Method and system for managing power delivery for power over Ethernet systems
US75096721. Apr. 200424. März 2009Compuware CorporationCross-platform single sign-on data sharing
US75120872. Okt. 200131. März 2009Sony CorporationCommunication system, apparatus and methods employing multiple communication networks
US75125488. Okt. 199931. März 2009Amazon.Com, Inc.Use of shopping cart to collect and purchase items selected from multiple web sites
US75196954. Juni 200714. Apr. 2009Ipass Inc.Service quality monitoring process
US751990527. Aug. 200314. Apr. 2009Webmd Corp.Automatic formatting and validating of text for a markup language graphical user interface
US7526485 *7. Juli 200528. Apr. 2009Alere Health Systems, Inc.Privacy and security method and system for a world-wide-web site
US752653330. Nov. 199928. Apr. 2009Cisco Technology, Inc.Active call context reconstruction for primary/backup resource manager servers
US752982610. März 20055. Mai 2009Cisco Technology, Inc.Sharing of NAS information between PoPs
US752983225. Okt. 20045. Mai 2009Cisco Technology, Inc.PPP domain name and L2TP tunnel selection configuration override
US753635113. Aug. 200119. Mai 2009Amazon.Com, Inc.User-to-user payment service with payee-specific pay pages
US7536360 *27. Juni 200619. Mai 2009Iprivacy, LlcElectronic purchase of goods over a communications network including physical delivery while securing private and personal information of the purchasing party
US75398628. Apr. 200426. Mai 2009Ipass Inc.Method and system for verifying and updating the configuration of an access device during authentication
US7540015 *11. Mai 200126. Mai 2009Privacy Shield LlcSystem, method and apparatus for establishing privacy in internet transactions and communications
US754294313. Aug. 20012. Juni 2009Amazon Technologies, Inc.Computer services and methods for collecting payments from and providing content to web users
US7548888 *22. Dez. 200016. Juni 2009Schutz Jared PDigital computer system and methods for implementing a financial transaction
US755219027. Okt. 199923. Juni 2009Verticalone CorporationSystem and method for automated electronic notification and transaction execution
US7562222 *23. März 200514. Juli 2009Rsa Security Inc.System and method for authenticating entities to users
US757114119. Jan. 20074. Aug. 2009Visa U.S.A. Inc.Method and system for facilitating payment transactions using access devices
US75809998. Okt. 200325. Aug. 2009Cisco Technology, Inc.Remote system administration and seamless service integration of a data communication network management system
US758122128. März 200525. Aug. 2009Microsoft CorporationSystems and methods for sending coordinated notifications
US758125725. Mai 200025. Aug. 2009Safepay Australia Pty LimitedSystem for handling network transactions
US758760722. Dez. 20038. Sept. 2009Intel CorporationAttesting to platform configuration
US759660928. Jan. 199929. Sept. 2009Net-Express, Ltd.WWW addressing
US759670321. März 200329. Sept. 2009Hitachi, Ltd.Hidden data backup and retrieval for a secure device
US759985619. Nov. 20026. Okt. 2009Amazon Technologies, Inc.Detection of fraudulent attempts to initiate transactions using modified display objects
US7603319 *30. Apr. 200313. Okt. 2009Contentguard Holdings, Inc.Method and apparatus for preserving customer identity in on-line transactions
US760355530. Juni 200513. Okt. 2009Microsoft CorporationProviding tokens to access extranet resources
US760357013. Mai 200413. Okt. 2009Cisco Technology, Inc.Power delivery over ethernet cables
US760624610. Apr. 200620. Okt. 2009Cisco Technology, Inc.Proxy on demand
US760685420. Juni 200120. Okt. 2009Ellis Iii Frampton EInternal hardware firewalls for microchips
US7607008 *1. Apr. 200420. Okt. 2009Microsoft CorporationAuthentication broker service
US76103903. Dez. 200227. Okt. 2009Sun Microsystems, Inc.Distributed network identity
US7620980 *21. Juli 199917. Nov. 2009Sun Microsystems, Inc.Secure data broker
US76275224. Juni 20071. Dez. 2009Visa U.S.A. Inc.System, apparatus and methods for comparing fraud parameters for application during prepaid card enrollment and transactions
US762752628. Aug. 20071. Dez. 2009Javien Digital Payment Solutions, Inc.Third-party billing system and method
US763103228. Jan. 19998. Dez. 2009Net-Express, Ltd.Personalized internet interaction by adapting a page format to a user record
US763119625. Febr. 20028. Dez. 2009Intel CorporationMethod and apparatus for loading a trustable operating system
US763452927. Mai 199815. Dez. 2009Ellis Iii Frampton EPersonal and server computers having microchips with multiple processing units and internal firewalls
US763668830. März 200122. Dez. 2009Checkfree CorporationElectronic bill processing with multi-level bill information storage
US764034823. Sept. 200229. Dez. 2009Corel CorporationSystem and method of managing access to web services
US76444398. Sept. 20045. Jan. 2010Cisco Technology, Inc.Timing attacks against user logon and network I/O
US7653679 *15. Aug. 200226. Jan. 2010Sun Microsystems, Inc.Systems and methods for multi-stage message brokering
US7653809 *15. Febr. 200226. Jan. 2010Hewlett-Packard Development Company, L.P.Method and system for controlling the on-line supply of digital products or the access to on-line services
US765748422. Aug. 20032. Febr. 2010Checkfree CorporationElectronic bill presentment via a wide area communications network
US766090220. Nov. 20019. Febr. 2010Rsa Security, Inc.Dynamic file access control and management
US767287927. Okt. 20002. März 2010Yodlee.Com, Inc.Interactive activity interface for managing personal data and performing transactions over a data packet network
US767289221. März 20002. März 2010James Michael OdomReal time network exchange with seller specified exchange parameters and interactive seller participation
US768506714. Mai 199923. März 2010Amazon.Com, Inc.Computer-assisted funds transfer system
US768948728. Aug. 200730. März 2010Amazon.Com, Inc.Computer-assisted funds transfer system
US770258530. Nov. 200620. Apr. 2010Checkfree CorporationMethods and systems for the determination and display of payment lead time in an electronic payment system
US770268214. Nov. 200520. Apr. 2010Incandescent, Inc.System and method for creating and manipulating information containers with dynamic registers
US770291719. Nov. 200420. Apr. 2010Microsoft CorporationData transfer using hyper-text transfer protocol (HTTP) query strings
US770712019. Febr. 200327. Apr. 2010Visa International Service AssociationMobile account authentication service
US77074167. Febr. 200827. Apr. 2010Novell, Inc.Authentication cache and authentication on demand in a distributed network environment
US770820230. Dez. 20054. Mai 2010Reflexis Systems, Inc.System and method for facilitating sales utilizing customer relationship management technology
US771162130. Okt. 20074. Mai 2010Visa U.S.A. Inc.Method and system for facilitating payment transactions using access devices
US77117482. Febr. 20064. Mai 2010Bright Walter GMethod and apparatus for simplified access to online services
US772533131. Dez. 200325. Mai 2010Webmd CorporationSystem and method for implementing a global master patient index
US772562229. Nov. 200625. Mai 2010Townsend Analytics, Ltd.Data distribution system and method
US772992531. Jan. 20051. Juni 2010Sony CorporationSystem and method for facilitating real time transactions between a user and multiple entities
US7729944 *3. Sept. 19991. Juni 2010Simplexity, LlcSystem and methods for buying and selling telecommunication services via a network
US7729954 *9. Sept. 20081. Juni 2010Amazon Technologies, Inc.Providing paid access to remote web service in an electronic marketplace
US7729955 *5. Febr. 20091. Juni 2010Amazon Technologies, Inc.Providing information regarding the use of web services in an electronic marketplace
US773451517. Aug. 20058. Juni 2010Amazon Technologies, Inc.Generating new invocable composite network services based on multiple other invocable constituent network services
US77345439. Mai 20018. Juni 2010Metavante CorporationElectronic bill presentment and payment system
US77347703. Juli 20068. Juni 2010Cisco Technology, Inc.System and method for monitoring information in a network environment
US7735122 *29. Aug. 20038. Juni 2010Novell, Inc.Credential mapping
US7739161 *22. März 199915. Juni 2010Siemens AktiengesellschaftMethod for using internet access networks through mobile internet-compatible mobile communication terminals
US774296720. Jan. 200022. Juni 2010Cardinalcommerce CorporationSecure and efficient payment processing system
US774310024. Okt. 200822. Juni 2010Cheah Ip LlcMethod and system for controlled distribution of one or more distinct profiles for a user
US774746621. Apr. 200829. Juni 2010Media Patents, S.L.Methods for distributions of digital files
US7747523 *18. Sept. 200129. Juni 2010Cohen Morris EInternet-based financial vehicles
US775212326. Apr. 20076. Juli 2010Townsend Analytics Ltd.Order management system and method for electronic securities trading
US775243423. Sept. 20026. Juli 2010Corel CorporationSystem and method for secure communication
US77525351. Dez. 20056. Juli 2010Yodlec.com, Inc.Categorization of summarized information
US776160612. Febr. 200320. Juli 2010Ipass Inc.Method and system to secure a connection application for distribution to multiple end-users
US776516311. Dez. 200127. Juli 2010Sony CorporationSystem and method for conducting secure transactions over a network
US776527927. Okt. 199927. Juli 2010Verticalone CorporationSystem and method for scheduling harvesting of personal information
US77655844. Dez. 200627. Juli 2010Aol Inc.Simple, secure login with multiple authentication providers
US777426027. März 200210. Aug. 2010Ebs Group LimitedDeal matching in an anonymous trading system
US77786369. Nov. 200617. Aug. 2010Gofigure Media, LlcMobile advertising systems and methods
US777890117. Febr. 200517. Aug. 2010Checkfree CorporationIntegrated electronic presentment and payment of bills by different entities
US777892629. März 200617. Aug. 2010Amazon Technologies, Inc.Processes for verifying, and accepting content postings from, creators of works represented in an electronic catalog
US778814310. Nov. 200831. Aug. 2010E-Lynxx CorporationSystem and method for competitive pricing and procurement of customized goods and services
US779274521. Febr. 20017. Sept. 2010Ipass Inc.Method and system to facilitate financial settlement of service access transactions between multiple parties
US779719322. Okt. 199914. Sept. 2010Simplexity, LlcSystems and methods for distributing telecommunication services via a network
US7797198 *17. Aug. 200514. Sept. 2010Amazon Technologies, Inc.Providing an invocable composite network service based on multiple other invocable constituent network services
US779725729. Okt. 200714. Sept. 2010Health Discovery CorporationSystem for providing data analysis services using a support vector machine for processing data received from a remote source
US7797276 *2. Okt. 200014. Sept. 2010Guang YangIntegrated database data editing system
US780177115. Juni 200621. Sept. 2010Amazon Technologies, Inc.Providing configurable usage models for available services
US780533612. Sept. 200628. Sept. 2010Amazon.Com, Inc.Anonymous delivery of digital products over a network via a link
US7805607 *11. Apr. 200328. Sept. 2010Thomson LicensingMethod for the anonymous authentication of a data transmitter
US780575617. März 200428. Sept. 2010Frampton E EllisMicrochips with inner firewalls, faraday cages, and/or photovoltaic cells
US78096374. Juni 20075. Okt. 2010Visa U.S.A. Inc.Portability of financial tokens
US780995729. Sept. 20055. Okt. 2010Intel CorporationTrusted platform module for generating sealed data
US781371419. Okt. 200712. Okt. 2010Openwave Systems Inc.Apparatus for accessing a common database from a mobile device and a computing device
US781423317. Sept. 200312. Okt. 2010Ellis Frampton EComputer and microprocessor control units that are inaccessible from the internet
US782266631. Okt. 200726. Okt. 2010Mcafee, Inc.Secure single-use transaction numbers
US782708523. Juni 20002. Nov. 2010Ebs Group LimitedConversational dealing in an anonymous trading system
US782711524. Apr. 20012. Nov. 2010Visa International Service AssociationOnline payer authentication service
US78314822. Mai 20089. Nov. 2010Ebay Inc.Method and apparatus for facilitating user registration in an on-line auction environment
US7840813 *14. Nov. 200323. Nov. 2010France TelecomMethod and system with authentication, revocable anonymity and non-repudiation
US78489726. Apr. 20007. Dez. 2010Metavante CorporationElectronic bill presentment and payment systems and processes
US7849173 *30. Dez. 20027. Dez. 2010Christopher UhlikSystem for on-demand access to local area networks
US7849177 *31. Aug. 20067. Dez. 2010Christopher UhlikSystem for on-demand access to local area networks
US784920428. Sept. 20077. Dez. 2010Oracle America, Inc.Distributed network identity
US785638617. Sept. 200921. Dez. 2010Yodlee, Inc.Host exchange in bill paying services
US78607904. Juni 200728. Dez. 2010Visa U.S.A. Inc.Systems and methods for automatic migration of a consumer between financial accounts
US786128130. Dez. 200528. Dez. 2010Reflexis Systems, Inc.System and method for facilitating the transfer of information relating to quality of an organization
US786587618. Juni 20024. Jan. 2011Hewlett-Packard Development Company, L.P.Multiple trusted computing environments
US787059231. Juli 200111. Jan. 2011Intertainer, Inc.Method for interactive video content programming
US787368221. Jan. 201018. Jan. 2011Incandescent Inc.System and method for creating and manipulating information containers with dynamic registers
US787729921. Jan. 200925. Jan. 2011Amazon.Com, Inc.Payment service capable of being invoked from merchant sites
US787749226. Febr. 200425. Jan. 2011Webmd CorporationSystem and method for delegating a user authentication process for a networked application to an authentication agent
US78777991. Aug. 200125. Jan. 2011Hewlett-Packard Development Company, L.P.Performance of a service on a computing platform
US788201729. Juni 20101. Febr. 2011Ebs Group LimitedDeal matching in an anonymous trading system
US788563519. Okt. 20078. Febr. 2011Openwave Systems Inc.Mobile device for accessing a common database and a computing device
US790820010. Mai 200215. März 2011Versata Development Group, Inc.Method and apparatus for efficiently generating electronic requests for quote
US790865025. Jan. 200615. März 2011Ellis Iii Frampton EComputer or microchip protected from the internet by internal hardware
US791276311. Febr. 201022. März 2011Amazon Technologies, Inc.Facilitating generation by users of new composite services based on other constituent network services
US791276411. Febr. 201022. März 2011Amazon Technologies, IncGenerating new composite network services based on user selection of other constituent network services
US791744429. Okt. 200229. März 2011Mcafee, Inc.Secure single-use transaction numbers
US7920518 *23. Febr. 20095. Apr. 2011Cisco Technology, Inc.System and method for concurrently utilizing multiple system identifiers
US79212905. Apr. 20025. Apr. 2011Ipass Inc.Method and system for securely authenticating network access credentials for users
US79213145. Okt. 20095. Apr. 2011Cisco Technology, Inc.Providing power over ethernet cables
US79258949. Nov. 200412. Apr. 2011Seagate Technology LlcSystem and method for delivering versatile security, digital rights management, and privacy services
US79260974. Aug. 200512. Apr. 2011Ellis Iii Frampton EComputer or microchip protected from the internet by internal hardware
US793382628. Juni 200126. Apr. 2011Checkfree CorporationCheck metaphor for electronic payment authorization
US793730628. Jan. 20083. Mai 2011Ebs Group LimitedArchitecture for anonymous trading system
US7941431 *12. Mai 200610. Mai 2011Thomson Reuters Global ResourcesElectronic document repository management and access system
US794549129. Dez. 200017. Mai 2011Metavante CorporationIntegrated systems for electronic bill presentment and payment
US795366030. März 200131. Mai 2011Checkfree Services CorporationMethod and system for payment processing
US795799030. Dez. 20057. Juni 2011Reflexis Systems, Inc.System and method for managing asset installation and evaluation
US79580492. Apr. 20037. Juni 2011Metavante CorporationSystem and method for obtaining customer bill information and facilitating bill payment at biller websites
US795835229. Dez. 20087. Juni 2011Ipass Inc.Method and system for verifying and updating the configuration of an access device during authentication
US796188413. Aug. 200214. Juni 2011Ipass Inc.Method and system for changing security information in a computer network
US796254828. Apr. 200914. Juni 2011Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US7966259 *9. Dez. 199921. Juni 2011Amazon.Com, Inc.System and methods for facilitating transactions on, and personalizing web pages of, third party web sites
US796641120. Nov. 200921. Juni 2011Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US7966496 *22. Dez. 200621. Juni 2011Jpmorgan Chase Bank, N.A.System and method for single sign on process for websites with multiple applications and services
US797505616. Apr. 20035. Juli 2011Mymail Ltd.Method for providing a network address
US79840978. Febr. 201019. Juli 2011Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US799165012. Aug. 20082. Aug. 2011Amazon Technologies, Inc.System for obtaining recommendations from multiple recommenders
US79917011. Sept. 20102. Aug. 2011Visa International Service AssociationOnline payer authentication service
US799175712. Aug. 20082. Aug. 2011Amazon Technologies, Inc.System for obtaining recommendations from multiple recommenders
US799628815. Nov. 20009. Aug. 2011Iprivacy, LlcMethod and system for processing recurrent consumer transactions
US799646824. Okt. 20089. Aug. 2011Cheah Ip LlcMethod and system for controlled distribution of information profiles over a network in response to user requests
US79966687. Apr. 20089. Aug. 2011International Business Machines CorporationDistributed system and computer program product for establishing security in a publish/subscribe data processing broker network
US800572328. Juni 201023. Aug. 2011Amazon Technologies, Inc.Providing multiple configurable usage models for available services
US800589617. Juni 201023. Aug. 2011Cheah Ip LlcSystem for controlled distribution of user profiles over a network
US801045330. Okt. 200730. Aug. 2011Visa U.S.A. Inc.Method and system for facilitating payment transactions using access devices
US8010542 *10. Sept. 200430. Aug. 2011B2I Technologies, Inc.Apparatus and method for building conjoined computer systems
US8019637 *7. Juli 200613. Sept. 2011Sermo, Inc.Method and apparatus for conducting an information brokering service
US80196397. Juli 200613. Sept. 2011Sermo, Inc.Method and apparatus for conducting an online information service
US801965219. Febr. 201013. Sept. 2011Amazon Technologies, Inc.Execution of composite services
US801965319. Febr. 201013. Sept. 2011Amazon Technologies, Inc.Providing composite services based on multiple other constituent services
US801969110. Sept. 200313. Sept. 2011Visa International Service AssociationProfile and identity authentication service
US802422515. Juni 200620. Sept. 2011Amazon Technologies, Inc.Controlling access to services via usage models
US802457020. Febr. 200820. Sept. 2011International Business Machines CorporationMethod and system for communication via a computer network
US802789528. Jan. 200827. Sept. 2011Ebs Group LimitedArchitecture for anonymous trading system
US802803923. Dez. 200527. Sept. 2011Reflexis Systems, Inc.System and method for communicating data between wireless mobile hand-held computer and a back-end computer system
US802806428. Apr. 200927. Sept. 2011Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US803700411. Juni 200711. Okt. 2011Oracle International CorporationComputer-implemented methods and systems for identifying and reporting deviations from standards and policies for contracts, agreements and other business documents
US803719428. Sept. 200711. Okt. 2011Oracle America, Inc.Distributed network identity
US803731422. Dez. 200311. Okt. 2011Intel CorporationReplacing blinded authentication authority
US805578128. Apr. 20098. Nov. 2011Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US806040930. Aug. 200715. Nov. 2011Simplexity, LlcCertification and activation of used phones purchased through an online auction
US80694077. Sept. 200029. Nov. 2011Yodlee.Com, Inc.Method and apparatus for detecting changes in websites and reporting results to web developers for navigation template repair purposes
US807773823. Juni 200813. Dez. 2011Cisco Technology, Inc.Default internet traffic and transparent passthrough
US807850127. Sept. 201013. Dez. 2011Ebay Inc.Method and apparatus for facilitating user registration in an on-line auction environment
US808245731. Juli 200820. Dez. 2011Cisco Technology, Inc.Data communications device for communicating with and concurrently providing power to a set of powerable devices
US809064320. Aug. 20073. Jan. 2012Ebs Group LimitedCompound order handling in an anonymous trading system
US80907749. Juni 20113. Jan. 2012Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US8099082 *16. Dez. 200517. Jan. 2012Research In Motion LimitedSystem and method wireless messaging in a wireless communication system
US810892012. Mai 200331. Jan. 2012Microsoft CorporationPassive client single sign-on for web applications
US810892228. Juni 201031. Jan. 2012Amazon Technologies, Inc.Customizable sign-on service
US81123285. Nov. 20017. Febr. 2012Hewlett-Packard Development Company, L.P.Secure and mediated access for E-services
US81176495. Aug. 201014. Febr. 2012Dormarke Assets Limited Liability CompanyDistributed hierarchical identity management
US812202025. Jan. 201021. Febr. 2012Amazon Technologies, Inc.Recommendations based on item tagging activities of users
US812734530. Okt. 200728. Febr. 2012Prism Technologies LlcMethod and system for managing access to protected computer resources provided via an internet protocol network
US813561120. Febr. 201113. März 2012Reflexis Systems, Inc.System and method for managing asset installation and evaluation
US814042910. März 201020. März 2012Cardinalcommerce CorporationUniversal merchant platform for payment authentication
US81404362. Juli 201020. März 2012Amazon Technologies, Inc.Processes for verifying creators of works represented in an electronic catalog
US81468064. Juni 20073. Apr. 2012Visa U.S.A. Inc.Prepaid negative balance fee processing and fee diversion
US815091322. Aug. 20113. Apr. 2012Chris CheahSystem for controlled distribution of user profiles over a network
US81609157. Juli 200617. Apr. 2012Sermo, Inc.Method and apparatus for conducting an information brokering service
US816093513. Jan. 201117. Apr. 2012Amazon.Com, Inc.Payment service capable of being integrated with merchant sites
US81659384. Juni 200724. Apr. 2012Visa U.S.A. Inc.Prepaid card fraud and risk management
US81659567. März 201124. Apr. 2012Checkfree CorporationBill availability notification and billing information request
US817095413. Nov. 20011. Mai 2012Cardinalcommerce CorporationSecure and efficient payment processing system with account holder defined transaction limitations
US81809099. Okt. 200715. Mai 2012Zvelo, Inc.Managed services platform
US818562528. Apr. 200922. Mai 2012Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US818562620. Nov. 200922. Mai 2012Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US81905285. Mai 201029. Mai 2012Intertrust Technologies CorporationTrusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, and rights management
US819062913. Juli 200629. Mai 2012Yodlee.Com, Inc.Network-based bookmark management and web-summary system
US819618911. Juni 20105. Juni 2012Aol LlcSimple, secure login with multiple authentication providers
US82005805. Febr. 200912. Juni 2012Amazon Technologies, Inc.Automated processes for seeking authorization to make printed publications searchable on a network
US820922712. Aug. 201026. Juni 2012E-Lynxx CorporationSystem and method for competitive pricing and procurement of customized goods and services
US82093733. Febr. 200926. Juni 2012Ellis Iii Frampton EComputers or microchips with a hardware side protected by a primary internal hardware firewall and an unprotected hardware side connected to a network, and with multiple internal hardware compartments protected by multiple secondary inner hardware firewalls
US8214390 *3. Juni 20093. Juli 2012Yahoo! Inc.Binary interest vector for better audience targeting
US821876522. Febr. 200210. Juli 2012Hewlett-Packard Development Company, L.P.Information system
US821949529. Juli 200210. Juli 2012Sony CorporationMethod of using personal device with internal biometric in conducting transactions over a network
US821949622. Febr. 200210. Juli 2012Hewlett-Packard Development Company, L.P.Method of and apparatus for ascertaining the status of a data processing environment
US822500311. Jan. 200617. Juli 2012Ellis Iii Frampton EComputers and microchips with a portion protected by an internal hardware firewall
US822985521. Juli 201124. Juli 2012Jean HuangMethod and system for facilitating payment transactions using access devices
US82392407. Juli 20067. Aug. 2012Sermo, Inc.Method and apparatus for conducting an information brokering service
US824994814. Juli 201121. Aug. 2012Amazon Technologies, Inc.System for obtaining recommendations from multiple recommenders
US825552720. Nov. 200928. Aug. 2012Media Patents, S.L.Methods for transmitting multimedia files and advertisements
US826067020. Nov. 20094. Sept. 2012Walker Digital, LlcMulti-tier pricing of individual products based on volume discounts
US826078729. Juni 20074. Sept. 2012Amazon Technologies, Inc.Recommendation system with multiple integrated recommenders
US826080629. Juni 20074. Sept. 2012Grdn. Net Solutions, LlcStorage, management and distribution of consumer information
US826133425. Apr. 20084. Sept. 2012Yodlee Inc.System for performing web authentication of a user by proxy
US826630416. Juni 200511. Sept. 2012Zvelo, Inc.Managed services platform
US827095127. Nov. 200718. Sept. 2012Alcatel LucentRule-based system and method for managing the provisioning of user applications on limited-resource and/or wireless devices
US827139524. Mai 200218. Sept. 2012Visa International Service AssociationOnline account authentication service
US827572311. Juni 201025. Sept. 2012Health Discovery CorporationSystem for providing data analysis services using a support vector machine for processing data received from a remote source
US8275749 *7. Aug. 200625. Sept. 2012Mimosa Systems, Inc.Enterprise server version migration through identity preservation
US827586316. Apr. 200325. Sept. 2012Mymail, Ltd.Method of modifying a toolbar
US828189917. März 20059. Okt. 2012Order Inn, Inc.Methods and apparatus for generating food brokering menus
US828625616. Okt. 20089. Okt. 2012Sony CorporationMethod and system for restricted biometric access to content of packaged media
US82908324. Juni 200716. Okt. 2012Visa U.S.A. Inc.Method and system for handling returned prepaid payment cards
US829148524. Juni 201016. Okt. 2012Ellis Iii Frampton EComputers and microchips with a faraday cage, a side protected by an internal hardware firewall and an unprotected side connected to the internet for network operations, and with internal hardware compartments
US829623128. Dez. 200923. Okt. 2012Amazon Technologies, Inc.Network accessible funds transfer system
US8296341 *4. März 200923. Okt. 2012Personalpath Systems, Inc.Privacy and security method and system for a world-wide-web site
US830151023. Jan. 200930. Okt. 2012Paypal, Inc.Electronic commerce for system registered consumers
US830216328. Juni 201030. Okt. 2012Corel CorporationSystem and method for secure communication
US830217022. Sept. 200930. Okt. 2012Bespoke Innovations S.A.R.L.Method for enhancing network application security
US831252927. Okt. 201113. Nov. 2012Ellis Frampton EGlobal network computers
US832191227. Aug. 201027. Nov. 2012Cardinalcommerce CorporationCentralized identity authentication for electronic communication networks
US833292430. Juni 200811. Dez. 2012Ellis Frampton EMicrochips with multiple internal hardware-based firewalls and dies
US835595930. März 201215. Jan. 2013Amazon.Com, Inc.Payment service capable of being integrated with merchant sites
US8356187 *21. Jan. 200915. Jan. 2013United States Postal ServiceMethods and systems for providing a secure electronic mailbox
US838017310. Okt. 201119. Febr. 2013Research In Motion LimitedSystem and method for wireless messaging in a wireless communication system
US838591218. Mai 200626. Febr. 2013Gofigure Media, LlcDigital media distribution system
US838678810. Nov. 200926. Febr. 2013Intel CorporationMethod and apparatus for loading a trustable operating system
US8402124 *16. Nov. 200019. März 2013International Business Machines CorporationMethod and system for automatic load balancing of advertised services by service information propagation based on user on-demand requests
US84072851. Aug. 201126. März 2013Facebook Inc.Method and system for controlled distribution of information over a network
US840747610. Nov. 200926. März 2013Intel CorporationMethod and apparatus for loading a trustable operating system
US842904610. Dez. 200723. Apr. 2013C-Sam, Inc.System and methods for servicing electronic transactions
US8429724 *25. Apr. 200623. Apr. 2013Seagate Technology LlcVersatile access control system
US8438086 *28. Nov. 20017. Mai 2013Jpmorgan Chase Bank, N.A.System and method for providing customers with seamless entry to a remote server
US846415927. Okt. 200911. Juni 2013Net-Express, Ltd.Personalized internet interaction
US846809910. Okt. 200918. Juni 2013Intertainer, Inc.Digital entertainment service platform
US847401021. Nov. 201025. Juni 2013Reflexis Systems, Inc.System and method for facilitating the transfer of information relating to quality of an organization
US847899827. Jan. 20062. Juli 2013Symantec CorporationAuthenticated communication using a shared unpredictable secret
US847924613. Juni 20122. Juli 2013Intertainer, Inc.System and method for interactive video content programming
US8484333 *22. Aug. 20019. Juli 2013Aol Inc.Single universal authentication system for internet services
US849933917. Aug. 200730. Juli 2013International Business Machines CorporationAuthenticating and communicating verifiable authorization between disparate network domains
US850445114. Nov. 20076. Aug. 2013Visa U.S.A. Inc.Method and system using candidate dynamic data elements
US850470424. Jan. 20056. Aug. 2013Dormarke Assets Limited Liability CompanyDistributed contact information management
US8510219 *31. März 200013. Aug. 2013Edward M. RoseBilling management package for internet access and web page utilization
US851613216. Apr. 200320. Aug. 2013Mymail, Ltd.Method of accessing a selected network
US85218593. Nov. 201027. Aug. 2013Durham Logistics LlcSystem for on-demand access to local area networks
US8522050 *28. Juli 201027. Aug. 2013Symantec CorporationSystems and methods for securing information in an electronic file
US8522155 *24. Juli 200827. Aug. 2013Making Everlasting Memories, Ltd.System and method for a multimedia timeline
US852738031. Okt. 20023. Sept. 2013C-Sam, Inc.System and methods for servicing electronic transactions
US852740720. Aug. 20113. Sept. 2013Purple Leaf, LlcProcess and device for conducting electronic transactions using wireless and cellular devices
US852775224. Jan. 20053. Sept. 2013Dormarke Assets Limited LiabilityGraduated authentication in an identity management system
US85330678. Aug. 201210. Sept. 2013Amazon Technologies, Inc.System for obtaining recommendations from multiple recommenders
US853902327. Juli 201117. Sept. 2013Facebook, Inc.Processing selected browser requests
US853958722. März 200617. Sept. 2013Hewlett-Packard Development Company, L.P.Methods, devices and data structures for trusted data
US855535926. Febr. 20098. Okt. 2013Yodlee, Inc.System and methods for automatically accessing a web site on behalf of a client
US855537024. Aug. 20128. Okt. 2013Frampton E EllisMicrochips with an internal hardware firewall
US85604562. Dez. 200515. Okt. 2013Credigy Technologies, Inc.System and method for an anonymous exchange of private data
US85611641. Juli 201015. Okt. 2013Frampton E. Ellis, IIIComputers and microchips with a side protected by an internal hardware firewall and an unprotected side connected to a network
US856622117. Mai 201122. Okt. 2013Ebs Group LimitedCompound order handling in an anonymous trading system
US856624820. Nov. 200122. Okt. 2013Grdn. Net Solutions, LlcInitiation of an information transaction over a network via a wireless device
US857226729. Sept. 200629. Okt. 2013Zvelo, Inc.Managed services platform
US857788021. Febr. 20125. Nov. 2013Amazon Technologies, Inc.Recommendations based on item tagging activities of users
US858353517. Apr. 200612. Nov. 2013Asoid Network Facility, LlcOperation of auctions over computer networks
US858928523. Sept. 200919. Nov. 2013Visa U.S.A. Inc.System, apparatus and methods for comparing fraud parameters for application during prepaid card enrollment and transactions
US85900562. Nov. 201019. Nov. 2013Intertrust Technologies CorporationTrusted infrastructure support systems, methods and techniques for secure electronic commerce electronic transactions and rights management
US8606719 *29. Jan. 200810. Dez. 2013Clickshare Service Corp.System for management of alternatively priced transactions on network
US86068855. Juni 200310. Dez. 2013Ipass Inc.Method and system of providing access point data associated with a network access point
US86122453. Sept. 200317. Dez. 2013Webmd LlcPersonalized health history system with accommodation for consumer health terminology
US861234318. Febr. 200817. Dez. 2013Amazon.Com, Inc.Network based payment service capable of generating coding for adding payment objects to pages of external sites
US8626561 *12. Sept. 20117. Jan. 2014Sermo, Inc.Method and apparatus for conducting an information brokering service
US862666517. Dez. 20127. Jan. 2014Amazon.Com, Inc.Payment service capable of being integrated with merchant sites
US862743513. Jan. 20127. Jan. 2014Amazon Technologies, Inc.Customizable sign-on service
US862744430. Aug. 20127. Jan. 2014Frampton E. EllisComputers and microchips with a faraday cage, with a side protected by an internal hardware firewall and unprotected side connected to the internet for network operations, and with internal hardware compartments
US863958231. Aug. 201128. Jan. 2014Amazon Technologies, Inc.Controlling access to services via usage models
US863960727. Sept. 201028. Jan. 2014Ebs Group LimitedConversational dealing in an anonymous trading system
US86452663. Dez. 20104. Febr. 2014Cardinalcommerce CorporationUniversal merchant platform for payment authentication
US864527721. Mai 20104. Febr. 2014Media Patents, S.L.Process for the on-line sale of a software product
US864527821. Mai 20104. Febr. 2014Media Patents, S.L.Process for the on-line sale of a software product
US865011819. März 201211. Febr. 2014Cardinalcommerce CorporationUniversal merchant platform for payment authentication
US86610948. Dez. 200825. Febr. 2014Net-Express Ltd.WWW addressing
US866152021. Nov. 200625. Febr. 2014Rajesh G. ShakkarwarSystems and methods for identification and authentication of a user
US8667136 *6. Dez. 20074. März 2014SkypeCommunication system
US8671281 *7. Juni 201111. März 2014Jpmorgan Chase Bank, N.A.System and method for single sign on process for websites with multiple applications and services
US86766948. Juni 201018. März 2014Cardinalcommerce CorporationSecure and efficient payment processing system
US867688522. Aug. 201218. März 2014Zaron Remote LlcMethods and transmitting multimedia files and advertisements
US868877713. Sept. 20121. Apr. 2014Facebook, Inc.Processing selected browser requests
US868877813. Sept. 20121. Apr. 2014Facebook, Inc.Processing browser requests based on trap lists
US869435210. Juli 20088. Apr. 2014Reflexis Systems, Inc.System and method for providing handheld field force data gathering automation in a big box retail environment
US869458113. Sept. 20128. Apr. 2014Facebook, Inc.Modifying browser requests to track browsing activities
US871279221. Juli 200329. Apr. 2014Webmd, LlcPersonalized health communication system
US871369018. Febr. 201129. Apr. 2014Facebook, Inc.Secure data exchange between data processing systems
US871369414. Sept. 201229. Apr. 2014Facebook, Inc.Secure data exchange for processing requests
US871369514. Sept. 201229. Apr. 2014Facebook, Inc.Processing data using information embedded in a data request
US872630331. Jan. 201113. Mai 2014Frampton E. Ellis, IIIMicrochips with an internal hardware firewall that by its location leaves unprotected microprocessors or processing units which performs processing with a network
US873231816. Apr. 200320. Mai 2014Mymail, Ltd.Method of connecting a user to a network
US873919528. Jan. 201127. Mai 2014Frampton E. Ellis, IIIMicrochips with an internal hardware firewall protected portion and a network portion with microprocessors which execute shared processing operations with the network
US874493831. Okt. 20073. Juni 2014Mcafee, Inc.Secure single-use transaction numbers
US874496330. Nov. 20123. Juni 2014Purple Leaf, LlcMethod for transferring an amount to be paid
US875132830. Nov. 200410. Juni 2014Siebel Systems, Inc.Methods and apparatuses for providing provisioned access control for hosted tailored vertical applications
US87513848. Mai 200210. Juni 2014Metavante CorporationIntegrated bill presentment and payment system and method of operating the same
US875150729. Juni 200710. Juni 2014Amazon Technologies, Inc.Recommendation system with multiple integrated recommenders
US875179014. Sept. 201210. Juni 2014Facebook, Inc.Secure data exchange based on request destination
US8751793 *2. Dez. 200310. Juni 2014Intertrust Technologies Corp.Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management
US875215821. Nov. 201210. Juni 2014Microsoft CorporationIdentity management with high privacy features
US876221015. März 201324. Juni 2014Cardinalcommerce CorporationAlternative payment implementation for electronic retailers
US87622833. Mai 200424. Juni 2014Visa International Service AssociationMultiple party benefit from an online authentication service
US876963212. Sept. 20121. Juli 2014United States Postal ServiceMethods and systems for providing a secure electronic mailbox
US87751971. Sept. 20058. Juli 2014Webmd, LlcPersonalized health history system with accommodation for consumer health terminology
US878838219. Nov. 201022. Juli 2014Visa U.S.A. Inc.Systems and methods for automatic migration of a consumer between financial accounts
US8793805 *30. Juli 201229. Juli 2014Amazon Technologies, Inc.Automatic application dependent anonymization
US87991578. Mai 20025. Aug. 2014Metavante CorporationBusiness combined bill management system and method
US87992062. Okt. 20065. Aug. 2014Mimosa Systems, Inc.Dynamic bulk-to-brick transformation of data
US88066525. Dez. 201212. Aug. 2014Microsoft CorporationPrivacy from cloud operators
US88124332. Okt. 200619. Aug. 2014Mimosa Systems, Inc.Dynamic bulk-to-brick transformation of data
US8813206 *27. Nov. 201219. Aug. 2014Hong Kong Applied Science and Technology Research Institute Company LimitedAnonymous personal content access with content bridge
US883850210. Apr. 201216. Sept. 2014Sony CorporationMethod of using personal device with internal biometric in conducting transactions over a network
US884394716. Nov. 201223. Sept. 2014Gofigure Media, LlcDigital media distribution system and method
US20030208442 *17. Aug. 20016. Nov. 2003Qpass, Inc.Electronic commerce using a transaction network
US20060136242 *21. Dez. 200422. Juni 2006International Business Machines CorporationDocuments between services exchange and visualization of negotiation
US20060242291 *30. Juni 200326. Okt. 2006Mikko NevalainenMethod and device for determining and notifying users having matching preference profiles for accessing a multiple access online application
US20070150526 *7. Aug. 200628. Juni 2007D Souza Roy PEnterprise server version migration through identity preservation
US20070226031 *30. Nov. 200427. Sept. 2007Manson Nicholas RMethods and apparatuses for grouped option specification
US20080282163 *24. Juli 200813. Nov. 2008Making Everlasting Memories, L.L.C.System and Method for a MultiMedia Timeline
US20090138730 *21. Jan. 200928. Mai 2009United States Postal Service.Methods and Systems For Providing A Secure Electronic Mailbox
US20090171982 *4. März 20092. Juli 2009Thomas HaganPrivacy and Security Method and System for a World-Wide-Web Site
US20090228370 *21. Mai 200910. Sept. 2009Verient, Inc.Systems and methods for identification and authentication of a user
US20090265768 *16. Juni 200922. Okt. 2009Cidway Technologies, LtdMethod and apparatus for the secure identification of the owner of a portable device
US20100050245 *20. Aug. 200825. Febr. 2010Yellowpages.Com LlcSystems and Methods to Provide Information and Services to Authorized Users
US20100191831 *20. Juni 200829. Juli 2010Nhn CorporationUbiquitous presence method and system for providing 3a based various application statuses
US20100313139 *3. Juni 20099. Dez. 2010Watfa Allie KBinary interest vector for better audience targeting
US20100332832 *28. Sept. 200930. Dez. 2010Institute For Information IndustryTwo-factor authentication method and system for securing online transactions
US20120022975 *3. Aug. 201126. Jan. 2012L Heureux IsraelDigital asset distribution system
US20120036051 *9. Aug. 20119. Febr. 2012Thomas Irving SachsonApplication activity system
US20120101831 *9. Nov. 201126. Apr. 2012C-Sam, Inc.Transactional services
US20120150664 *12. Sept. 201114. Juni 2012Sermo, Inc.Method and apparatus for conducting an information brokering service
US20120166449 *25. März 201128. Juni 2012Infosys Technologies LimitedMethod and system for managing sports related information
US20130013456 *14. Sept. 201210. Jan. 2013Paypal International LimitedE-mail invoked electronic commerce
US20130247157 *26. Apr. 201319. Sept. 2013Mymail, Ltd.Method of connecting a device to a network using different service providers
US20130275282 *16. Okt. 201217. Okt. 2013Microsoft CorporationAnonymous billing
USRE412103. Nov. 20066. Apr. 2010Fotomedia Technologies, LlcMethod and apparatuses for transferring data for multiple applications through a single communication link in response to authentication information
USRE418112. Okt. 20035. Okt. 2010Cisco Technology, Inc.Integration of authentication authorization and accounting service and proxy service
USRE450394. Febr. 201022. Juli 2014Unwired Planet, LlcMethod and apparatus for accessing a common database from a mobile device and a computing device
CN1647548B6. Dez. 20023. Aug. 2011艾利森电话股份有限公司Service access and conferencing system and method in a telecommunications network
CN100525293C11. Apr. 20035. Aug. 2009汤姆森许可贸易公司Method for the anonymous authentication of a data transmitter
CN101662499B6. Dez. 20026. Febr. 2013艾利森电话股份有限公司Service access and conferencing system and method in a telecommunications network
CN101662699B6. Dez. 20022. Jan. 2013艾利森电话股份有限公司Service access system and method in a telecommunications network
DE10125017A1 *22. Mai 20015. Dez. 2002Siemens AgVerfahren zum Erbringen von Diensten in einem Datenübertragungsnetz und zugehörige Komponenten
EP0992924A2 *24. Sept. 199912. Apr. 2000NCR International, Inc.Privacy-enabled loyalty card system and method
EP1043671A2 *17. März 200011. Okt. 2000International Business Machines CorporationMessage broker providing a publish/subscribe service and method of processing messages in a publish/subscribe environment
EP1091330A2 *6. Okt. 200011. Apr. 2001CheckFree Services CorporationElectronic billing with flexible biller controlled electronic bill presentment
EP1117034A1 *12. Jan. 200018. Juli 2001Karsten KuhlaMethod and system for building up an online service platform and computer program product
EP1199860A1 *16. Okt. 200024. Apr. 2002Sony International (Europe) GmbHUser context information database for plurality of network services
EP1213673A2 *6. Nov. 200112. Juni 2002Sony CorporationInformation processing apparatus and method, recording medium, and service providing system
EP1222503A2 *10. Aug. 200017. Juli 2002C-Sam, Inc.System and method for servicing electronic transactions
EP1280317A1 *26. Juli 200229. Jan. 2003Hewlett-Packard CompanyMulti-domain authorisation and authentication
EP1331784A1 *21. Jan. 200230. Juli 2003Tric AbA method for providing access to contents on a network based on content access rights
EP1379982A1 *14. Febr. 200214. Jan. 2004Billtobill LimitedInternet billing system
EP1407570A1 *10. Juli 200214. Apr. 2004Wave Systems CorporationMethod and system for user and group authentication with pseudo-anonymity over a public network
EP1461718A1 *4. Dez. 200229. Sept. 2004Sun Microsystems, Inc.Distributed network identity
EP1528707A228. Sept. 20044. Mai 2005Microsoft CorporationChallenge-based authentication without requiring knowledge of secret authentication data
EP2234056A2 *10. Aug. 200029. Sept. 2010C-Sam, Inc.System and method for servicing electronic transactions
WO1999015989A1 *25. Sept. 19981. Apr. 1999Axel H AhlbergAuthentication and entitlement for users of web based data management programs
WO1999016099A2 *25. Sept. 19981. Apr. 1999Carol Y DevineSecure customer interface for web-based data management
WO1999022332A1 *23. Okt. 19986. Mai 1999Interdesign HdlA system and method for acquiring remote programs for performing a task
WO1999028821A1 *25. Nov. 199810. Juni 1999Tci Satellite Entertainment InVirtual private communications network and method for secure business to business communication
WO1999064958A1 *9. Juni 199916. Dez. 1999Placeware IncBi-directional process-to-process byte stream protocol
WO2000001117A1 *28. Juni 19996. Jan. 2000Storage Technology CorpSystem and method for temporary data transfer connections
WO2000033223A1 *30. Nov. 19998. Juni 2000William A GindlespergerA system and method for competitive pricing and procurement of customized goods and services
WO2000034873A1 *18. Nov. 199915. Juni 2000Yodlee IncMethod and apparatus for providing and maintaining a user-interactive portal system accessible via internet
WO2000043962A1 *19. Jan. 200027. Juli 2000Sony Electronics IncA method and apparatus of providing secure transactions on a network
WO2000055793A1 *20. März 200021. Sept. 2000Morris E CohenSystems for financial and electronic commerce
WO2000057313A1 *24. März 200028. Sept. 2000Yusave Com IncSystem and method for implementing web-based direct manufacturer marketing and transactions
WO2000063855A1 *19. Apr. 200026. Okt. 2000Peter R BartonImproved system and method for anonymous transactions
WO2000072109A2 *25. Mai 200030. Nov. 2000Safepay Australia Pty LtdSystem for handling network transactions
WO2000077733A2 *2. Juni 200021. Dez. 2000John Quentin PhillippsElectronic commerce system
WO2001041401A2 *30. Nov. 20007. Juni 2001At & T CorpSystem and method for encoding user information in domain names
WO2001043033A1 *8. Dez. 200014. Juni 2001Amazon Com IncUse of an intermediary to securely provide customer information to third party internet merchants
WO2001052151A1 *11. Jan. 200119. Juli 2001Terry S BahrInternet vending system
WO2001059648A1 *18. Aug. 200016. Aug. 2001Clickshare Service CorpSystem for management of transactions on networks
WO2001061551A1 *20. Febr. 200123. Aug. 2001Multitude IncSystem and method for creating audio forums from e-mail
WO2001063532A1 *23. Febr. 200130. Aug. 2001Ipass IncMethod and system to normalize transaction data pertaining to accesses to a service provided via a plurality of service providers
WO2001076171A2 *2. Apr. 200111. Okt. 2001Catenic GmbhMethod for operating a data processing system
WO2002013114A1 *27. Juli 200114. Febr. 2002Netledger IncSystems and methods for integrating independent secure application service providers
WO2002017555A2 *16. Aug. 200128. Febr. 2002Verisign IncCountering credentials copying
WO2002063816A2 *6. Febr. 200215. Aug. 2002Metaedge CorpMethod and system for routing network traffic based upon application information
WO2002071280A1 *14. Febr. 200212. Sept. 2002Billtobill LtdInternet billing system
WO2002093378A1 *22. Apr. 200221. Nov. 2002Solomon FriedmanSystem, method and apparatus for establishing privacy in internet transactions and communications
WO2002095637A2 *7. Mai 200228. Nov. 2002Christine HagnMethod for providing services in a data transmission network and associated components
WO2003007114A2 *12. Juli 200223. Jan. 2003First Usa Bank NaSystem and method for providing discriminated content to network users
WO2003044686A1 *20. Nov. 200230. Mai 2003Aereous LlcDynamic file access control and management
WO2003049000A14. Dez. 200212. Juni 2003Sun Microsystems IncDistributed network identity
WO2003049459A1 *6. Dez. 200212. Juni 2003Ericsson Telefon Ab L MService access and conferencing system and method in a telecommunications network
WO2003071454A1 *20. Febr. 200328. Aug. 2003Warrick James CramerMethod and apparatus for performing electronic transactions
WO2003088612A2 *11. Apr. 200323. Okt. 2003Jean-Pierre AndreauxMethod for the anonymous authentication of a data transmitter
WO2005052786A2 *23. Nov. 20049. Juni 2005Cpm S AElectronic computing system - on demand and method for dynamic access to digital resources
WO2006071473A2 *7. Dez. 20056. Juli 2006Mark D BrownTranslation engine for computer authorizations between active directory and mainframe systems
WO2009000130A1 *3. Juli 200731. Dez. 2008Yafeng XiangMethod and system for realizing network payment
WO2013040328A1 *14. Sept. 201221. März 2013Service Heartbeat LlcAutomated login initialization on detection of identifying information
Klassifizierungen
US-Klassifikation709/229, 705/26.35
Internationale KlassifikationG06Q20/00, H04L29/06
UnternehmensklassifikationG06Q20/14, H04L63/08, G06Q20/02, G06Q20/00, G06Q30/0609
Europäische KlassifikationG06Q20/02, G06Q20/14, H04L63/08, G06Q30/0609, G06Q20/00
Juristische Ereignisse
DatumCodeEreignisBeschreibung
11. März 2010FPAYFee payment
Year of fee payment: 12
6. März 2006FPAYFee payment
Year of fee payment: 8
7. März 2002FPAYFee payment
Year of fee payment: 4
16. Okt. 1996ASAssignment
Owner name: MICROSOFT CORPORATION, WASHINGTON
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:TEPEER, JEFFREY A.;KONERU, SUDHEER;MANGONE, GORDON;AND OTHERS;REEL/FRAME:008183/0245;SIGNING DATES FROM 19960930 TO 19961003